[osol-discuss] Has something changed with root logins [b 124]

2009-10-15 Thread Harry Putnam
I've diddled around for 35 minutes googling for the release notes for build 124 to see if something is in there about root logins. Can some kind sole please direct me. Google stings like `opensolaris release notes 2010' `opensolaris release notes build 124 and etc have

Re: [osol-discuss] Has something changed with root logins [b 124]

2009-10-15 Thread Alan Coopersmith
Harry Putnam wrote: I've diddled around for 35 minutes googling for the release notes for build 124 to see if something is in there about root logins. Can some kind sole please direct me. Google stings like `opensolaris release notes 2010' `opensolaris release notes build

Re: [osol-discuss] Has something changed with root logins [b 124]

2009-10-15 Thread Norm Jacobs
Harry Putnam wrote: I've diddled around for 35 minutes googling for the release notes for build 124 to see if something is in there about root logins. Can some kind sole please direct me. Google stings like `opensolaris release notes 2010' `opensolaris release notes build

Re: [osol-discuss] Has something changed with root logins [b 124]

2009-10-15 Thread Harry Putnam
Alan Coopersmith alan.coopersm...@sun.com writes: Harry Putnam wrote: I've diddled around for 35 minutes googling for the release notes for build 124 to see if something is in there about root logins. Can some kind sole please direct me. Google stings like `opensolaris release notes 2010'

Re: [osol-discuss] Has something changed with root logins [b 124]

2009-10-15 Thread Harry Putnam
Norm Jacobs norm.jac...@sun.com writes: [...] 2. Configure pam(3PAM) to allow sshd to let you login to a role directly. /etc/pam.conf sshd-kbdint account required pam_unix_account.so.1 Haa... that was the baby... thanks. But...er I already feel the noose

Re: [osol-discuss] Has something changed with root logins [b 124]

2009-10-15 Thread Bryan Allen
+-- | On 2009-10-15 19:48:14, Harry Putnam wrote: | | I'm still not finding it... I may be the lamest search technician | known to man but I've spent way too much time at this point, looking | for this... is it really the

Re: [osol-discuss] Has something changed with root logins [b 124]

2009-10-15 Thread Gary Gendel
On a side note... Is there a good tutorial on why root as a role is better than root as an account? I just can't seem to get my head around this. If someone has access to my account, then they can use pfexec to do damage without even entering a password. With a root account, disabled for

Re: [osol-discuss] Has something changed with root logins [b 124]

2009-10-15 Thread Keith Mitchell
Actually, the default of assigning the main user the *profile* of Primary Administrator is the loophole that leads to what you're describing. It's a known issue tracked under bug 4885: http://defect.opensolaris.org/bz/show_bug.cgi?id=4885 Gary Gendel wrote: On a side note... Is there a good