From owner-freebsd-questions Sun Apr 5 13:39:55 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id NAA08078 for freebsd-questions-outgoing; Sun, 5 Apr 1998 13:39:55 -0700 (PDT) (envelope-from owner-freebsd-questions@FreeBSD.ORG) Received: from cplkagan.globaleyes.net (cplkagan.GlobalEyes.net [209.60.64.59]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id NAA08071 for ; Sun, 5 Apr 1998 13:39:49 -0700 (PDT) (envelope-from parrothd@midwest.net) Received: from parrothd.houselan.net (parrothd [10.10.0.10]) by cplkagan.globaleyes.net (8.8.7/8.8.5) with SMTP id PAA04154; Sun, 5 Apr 1998 15:40:00 -0500 (CDT) Message-Id: <3.0.5.32.19980405154859.00837490@midwest.net> X-Sender: parrothd@midwest.net X-Mailer: QUALCOMM Windows Eudora Pro Version 3.0.5 (32) Date: Sun, 05 Apr 1998 15:48:59 -0500 To: "Ross McFarland" , From: "Jonathan E. Lyons" Subject: Re: the su command and specifing who can telnet In-Reply-To: <000d01bd60be$2d7a89a0$896969ce@win95-133> Mime-Version: 1.0 Content-Type: text/enriched; charset="us-ascii" Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG At 02:10 PM 4/5/98 -0400, Ross McFarland wrote: >>>> I have two hopefully quick questions. 1) I've found and understand how the ftp access is controlled by a file, where and\or how can I control who can access the server by Telnet? I have a user name for apache to run under and would like to restrict its ability to log in from any where other than the console. Not sure on this one, but you could change the shell of the apach acount to...passwd( or whatever) then use su if tlnet access is needed.... #chsh grunty #Changing user database information for grunt. Login: grunt Password: hstTDhGgwy2vS7o Uid [#]: 1000 Gid [# or name]: 11000 Change [month day year]: Expire [month day year]: Class: default Home directory: /home/grunty Shell: /usr/bin/passwd Full Name: grunty Location: Office Phone: Home Phone: >>>> 2) how do I allow a user to su to root. I've tried setting group to 0(wheel) and using the log in class root, staff and everything else I can think of in every combination. when I try it always says >>>>> Just add the user to /etc/group ....For example.. :32pm@cplkagan/etc>more group wheel:*:0:root,me,nextuser daemon:*:1:daemon kmem:*:2:root The beer is too cold, the daiquiris too fruitful, there's no place like home! Jimmy Buffett "The weather is here, Wish you were beautiful" Jon Lyons parrothd@midwest.net 87 HONDA VFR700 http://cplkagan.dyn.ml.org/ To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message