Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 30 Apr 2000 18:43:47 +0100
From:      Paul Robinson <paul@akitanet.co.uk>
To:        "G.B.Naidu" <gbnaidu@sasi.com>
Cc:        freebsd-net@FreeBSD.ORG
Subject:   Re: How do I login as root using telnet?
Message-ID:  <390C70D3.87088484@akitanet.co.uk>
References:  <Pine.GHP.4.10.10004301200560.23210-100000@hpd14.sasi.com>

next in thread | previous in thread | raw e-mail | index | archive | help
"G.B.Naidu" wrote:
 
> Hi,
> 
> I would like to know how to enable superuser logins using telnet?

This is a *REALLY* bad idea. The problem with telnet, is that is a
trivial task to sniff passwords, so if you login as root over telnet,
others can pick up your root password. Then, once they've got that, they
can telnet in themselves as root.

You want to investigate the use of 'su', so create a user who is in
group wheel, and then let them login and su to root.

You should also start considering the use of ssh instead of telnet.
There are ssh clients for Windows, Mac, etc. as well as Unix. This in
itself gives you a little more security as the password never crosses
the wire in plaintext...

Of course, if you really, really, really, REALLY had to be able to
telnet in as root (you don't, I don't care what you say, you're just
trying to break things for no good reason! :) ), then you need to look
at /etc/ttys and change the entries under ttyp* to make them 'secure'
(do a 'man 5 ttys' if you're not sure).

-- 
Paul Robinson - Developer/Sys Admin @ Akitanet http://www.akitanet.co.uk
------------------------------------------------------------------------
Sales: T:+44 (0)1869 337088  F:+44 (0)1869 337488 E:sales@akitanet.co.uk
Techs: T:+44 (0)161 228 6388 F:+44 (0)161 228 6387 E:root@akitanet.co.uk
------------------------------------------------------------------------


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-net" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?390C70D3.87088484>