Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 23 Oct 2008 11:01:44 -0400
From:      Jerry McAllister <jerrymc@msu.edu>
To:        Wojciech Puchar <wojtek@wojtek.tensor.gdynia.pl>
Cc:        Lowell Gilbert <freebsd-questions-local@be-well.ilk.org>, freebsd-questions@freebsd.org, APseudoUtopia <apseudoutopia@gmail.com>
Subject:   Re: Locked out of Root
Message-ID:  <20081023150144.GC81643@gizmo.acns.msu.edu>
In-Reply-To: <20081023144157.S10109@wojtek.tensor.gdynia.pl>
References:  <27ade5280810221955l6bb7fe23u504b008e6799fc57@mail.gmail.com> <444p33pmbp.fsf@lowell-desk.lan> <20081023144157.S10109@wojtek.tensor.gdynia.pl>

next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, Oct 23, 2008 at 02:43:47PM +0200, Wojciech Puchar wrote:

> >>group, and root login is disabled in SSH.
> >>
> >>Thanks for any help/advice.
> >
> >You'll need to reboot in single-user mode.
> >E.g.,
> >http://be-well.ilk.org/FreeBSD/doc/en_US.ISO8859-1/books/faq/admin.html#SU-WHEEL-GROUP
> >
> >--
> 
> and next time - do enable root login through ssh/rlogin/telnetd
> 
> there is no security gain by disabling it, as you have to know password 
> too.

It guarantees that the root password is passed encrypted.

So, next time do NOT enable root loging via ssh.
Instead, put the non-root user in the wheel group.

////jerry

> 
> if course it's not bright to login as root over telnet through public 
> network, but too - it's not security hole in system, just in 
> administrator's brain if he/she do it this way.
> 
> 
> _______________________________________________
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org"



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20081023150144.GC81643>