🚀 go-pugleaf

On Sat, 09 Sep 2000 01:11:50 +0200, Carsten Weber <cweber@physik.tu-berlin.de> wrote:
|Hello.
|I got my linux server running and set up apache.  However, I access the
|server via a client computer.  I am not able to log on remotely as
|root.  Which files do I have to edit in order to be able to do this?
|I'm running RedHat linux.  Thanks for your help.  Carsten


It's much safer to keep things that way. Log in as a normal user,
then use 'su -' to become root. If at all possible, install SSH
and use that instead of telnet to login remotely.

Much better sucurity.


-- 
Reverend Paul Colquhoun,      postmaster@andor.dropbear.id.au
Universal Life Church    http://andor.dropbear.id.au/~paulcol
-=*=-=*=-=*=-=*=-=*=-=*=-=*=-=*=-=*=-=*=-=*=-=*=-=*=-=*=-=*=-
xenaphobia: The fear of being beaten to a pulp by
            a leather-clad, New Zealand woman.

In <39B97236.67E75FFF@physik.tu-berlin.de> Carsten Weber <cweber@physik.tu-berlin.de> writes:
>I got my linux server running and set up apache.  However, I access the
>server via a client computer.  I am not able to log on remotely as
>root.  Which files do I have to edit in order to be able to do this?
>I'm running RedHat linux.  Thanks for your help.  Carsten

Install ssh (openssh or freessh) Do NOT log in even as user on telnet.

"Carsten Weber" <cweber@physik.tu-berlin.de> wrote:

> I got my linux server running and set up apache.  However, I access
> the server via a client computer.  I am not able to log on remotely as
> root.  Which files do I have to edit in order to be able to do this?
> I'm running RedHat linux.  Thanks for your help.  Carsten

/etc/securetty

However, enabling remote logins as root may not be a good idea.  This applies
especially if you're using telnet (which is insecure because it sends all
data -- including usernames and passwords -- in the clear).

It is much better to remotely log in as a non-privileged user and then use su
to gain root access when you need to do so.

--
Johnno (johnno@nospam.casebook.org)
http://johnno.casebook.org

Carsten Weber wrote:
> 
> Hello.
> I got my linux server running and set up apache.  However, I access the
> server via a client computer.  I am not able to log on remotely as
> root.  Which files do I have to edit in order to be able to do this?
> I'm running RedHat linux.  Thanks for your help.  Carsten

It's a getty option, but please don't do this.  Set up SSH instead.

Johnno wrote:

> However, enabling remote logins as root may not be a good idea.  This applies
> especially if you're using telnet (which is insecure because it sends all
> data -- including usernames and passwords -- in the clear).
> 
> It is much better to remotely log in as a non-privileged user and then use su
> to gain root access when you need to do so.

You get no security advantage from doing this.  If the attacker can
listen to your Telnet login, he can listen to your su commands.  The
only relatively secure way is ssh.

>You get no security advantage from doing this.  If the attacker can
>listen to your Telnet login, he can listen to your su commands.  The
>only relatively secure way is ssh.

or possibly even better, srp-telnet.  

m.
-- 
       ._      ._      ._      ._
   _.-._)`\_.-._)`\_.-._)`\_.-._)`\_.-._

>> >You get no security advantage from doing this.  If the attacker can
>> >listen to your Telnet login, he can listen to your su commands.  The
>> >only relatively secure way is ssh.
>> or possibly even better, srp-telnet.  
>
>Never heard of it, what makes it better than ssh?

it does the same kinds of things as ssh, except slightly less info is sent 
in plain text.  i think openssh.org has links to the srp webpage at stanford.  

...there are other srp programs also- srp-ftp etc :)  

m.
-- 
       ._      ._      ._      ._
   _.-._)`\_.-._)`\_.-._)`\_.-._)`\_.-._

bekj@tertius.net.au (Bek Oberin) writes:

> Mostyn BRAMLEY-MOORE (mostynm@queeg.cs.mu.OZ.AU) wrote...
> > >You get no security advantage from doing this.  If the attacker can
> > >listen to your Telnet login, he can listen to your su commands.  The
> > >only relatively secure way is ssh.
> > or possibly even better, srp-telnet.  
> 
> Never heard of it, what makes it better than ssh?

SRP provides drop replacements for telnet, ftp and their daemons.
these replacements can (optionally) do encryption of password and the
session.  the SRP clients and servers can interoperate with the
standard un-encrypted ones too.

it doesn't set up a pipe or tunnel through which you can send info.

-- 
J o h a n  K u l l s t a m
[kullstam@ne.mediaone.net]
Don't Fear the Penguin!

"Jason Stokes" <jstok@bluedog.apana.org.au> wrote:

> > However, enabling remote logins as root may not be a good idea.  This
> > applies especially if you're using telnet (which is insecure because it
> > sends all data -- including usernames and passwords -- in the clear).

> > It is much better to remotely log in as a non-privileged user and then
> > use su to gain root access when you need to do so.

> You get no security advantage from doing this.  If the attacker can
> listen to your Telnet login, he can listen to your su commands.  The
> only relatively secure way is ssh.

Yes, good point.  In a fit of Alzheimer's, I seem to have overlooked that.

Agreed re telnet; ssh is the business.

Even so, it is still a safer idea to log in as a non-privileged user and
access the root account using su only when necessary.

J.