Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 3 May 2001 16:46:47 -0500
From:      "Jim Riffle" <rif@kconline.com>
To:        <nsayer@FreeBSD.ORG>, "Gavin Atkinson" <gavin@ury.york.ac.uk>
Cc:        <freebsd-stable@FreeBSD.ORG>, <markm@FreeBSD.ORG>
Subject:   Re: telnet sometimes gets "SRA secure login" prompt??
Message-ID:  <00b601c0d41a$8f06ce40$0585f1d8@desert.kconline.com>
References:  <Pine.BSF.4.33.0105021758120.57439-100000@ury.york.ac.uk> <3AF0534B.FBD68B81@talarian.com>

next in thread | previous in thread | raw e-mail | index | archive | help
> > Ah - that explains it... Though to be honest, I was more worried as to
why
> > an out-of-the-box install of 4.3-RELEASE withg crypto installed would
> > allow telnet in as root - and no, my ttys are not marked as secure.
>
> It's a bug. No one has reported it before. Now that I'm aware of it, I'll
see what I can do.

A quick way to disable root logins from remote is to edit the
/etc/login.access file.  SRA will still accept the user, but the login is
denied. Unfortunately, with the acceptance, you know if you have the correct
root password.

-jim


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-stable" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?00b601c0d41a$8f06ce40$0585f1d8>