From owner-freebsd-questions  Mon Jul  1 15:11:19 1996
Return-Path: owner-questions
Received: (from root@localhost)
          by freefall.freebsd.org (8.7.5/8.7.3) id PAA20511
          for questions-outgoing; Mon, 1 Jul 1996 15:11:19 -0700 (PDT)
Received: from phaeton.artisoft.com (phaeton.Artisoft.COM [198.17.250.211])
          by freefall.freebsd.org (8.7.5/8.7.3) with SMTP id PAA20485
          for <questions@freebsd.org>; Mon, 1 Jul 1996 15:11:15 -0700 (PDT)
Received: (from terry@localhost) by phaeton.artisoft.com (8.6.11/8.6.9) id PAA06700; Mon, 1 Jul 1996 15:09:51 -0700
From: Terry Lambert <terry@lambert.org>
Message-Id: <199607012209.PAA06700@phaeton.artisoft.com>
Subject: Re: rlogin as root refused
To: mc7953@mclink.it (Marco Masotti)
Date: Mon, 1 Jul 1996 15:09:51 -0700 (MST)
Cc: questions@freebsd.org, mc7953@mclink.it
In-Reply-To: <31D53AD3.41C67EA6@mclink.it> from "Marco Masotti" at Jun 29, 96 04:16:51 pm
X-Mailer: ELM [version 2.4 PL24]
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Sender: owner-questions@freebsd.org
X-Loop: FreeBSD.org
Precedence: bulk

> I'm getting problems doing rlogin as root, always when towards FreeBSD
> machines.
> 
> I can do rsh generic commands and rcp, but not rlogin.
> 
> I set a "+" in the ~root/.rhosts file, but this doesn't suffice.

It is *dangerous* to do this.  You want to specify particular machines
and users, if you allow this at all.

> Nevertheless, when doing rsh|rlogin <FreeBSD host>, I get:
> 
> # rsh <FreeBSD host>
> Password:
> root login refused on this terminal.
> login:

look at /etc/ttys.  Note the word "network" instead of the word
"secure".  Man ttys.

The pty's do not allow root login.  This is a security option which
you *can* turn off.  We advise against it strongly (so strongly,
that by default we don't allow it, and you have to turn it off).


					Terry Lambert
					terry@lambert.org
---
Any opinions in this posting are my own and not those of my present
or previous employers.