Printable View
I have Red Hat 7.1 and when I try logging in remotely as root it won't let me. It keeps saying login incorrect.:(
How do I make it so that I can login as root using telnet?
Help would be appreciated.
And when I configure ipchains do I have to rebuild the kernel?
thanx in advance.:)
And the test user I made doesn't work either. :(
But if I make another user it lets me log on but root still won't. :confused:
Are you even running the telnet services? be sur3e they are installed, and remember that ENABLING remote root login is a stupid thing to do.
OverandOut.
comJo
Nobody can access it from the outside. I just have it on a local network. We have a ADSL router for internet. There is no way to access it other than the local net.:)
Here is what i would do. If you really really want telnet enabled well thats your thing so ill help ya out. in your /etc/hosts.allow just put the ip and hostname in that file and you should be good. But what i would do is use ssh. SSH allows for i thing 128 bit encryption for every packet.....that way if your network is compromised they will have a much harder time "sniffing"your packets.If you have any other questions or the hosts.allow doesnt work you still have a few other options.
If you get to the logon prompt, then telnet services are running fine.
The reason you can't login as root, is because telnet does not alow that.(there is no way to change this, that I know of)
You must log in as a normal user, and then su to root.
If the user you log in as cannot su to root, check and make sure that user is part of the wheel group, in /etc/group.
SSH is the same way, it will not let you login as root directly either. However unlike telnet SSH's configureation has a peramiter to allow root logins, although I do not recommend that since its a major security issue.
How do you use su?:confused:
Now, I don't use *nix...
But I believe SU stands for Substitute User (Not SuperUser), and you invoke it like such:
"su rootpassword" to log in as root, or
"su username userpassword" to change to username.
It's really simple, if your in the wheel group just enter su at the prompt.
Enter root passwd and that's it. =)
actually ssh does allow for root conection as does telnet
the ssh command would be as follows
ssh -l root x.x.x.x then it will promt for the password and bing your in
do a man on telnet and im almost positive you can log in directly as root
If you type:
su
it will prompt you for a password (root's password)
su -
will prompt you for root's password, and will drop you into root's home directory after giving the password
As for telnet "not letting root log in." That's not entirely true. I can log into my linux box (when I have the service running) as root without any problems.
Happy Hacking
Ok, for the first question, if you want to login as root with telnet, have a look at /etc/securetty. It describes the tty which are considered as enough secure to accept direct root login.
If I were you, even on your lan, I would have a closer look at ssh or using su.
"Man" is your friend!
Jean-Francois
Here... ill put it into newbie terms for you..
by default.. linux (last version i was with was 5.1 before moving to BSD) and FreeBSD will not allow you to login via telnet
this is for security reasons, ie. it makes it easier to spot intruders playing mr admin
therefore you need to su (basically asume that login in newbie terms)
this means that by having to su to root, it makes it harder for lamers to break into you machines.
put it another way.. they need to find an account and breach that first. not always terribly hard however but depends on the lamer trying to breach your system...
however you CAN change this so u can directly login as root, but its made a default for a reason.
anyhow to sum up... why dont you try reading a tutorial, or even the manual ???
btw, FreeBSD 0wnz j00
Terr wrote:
That is 100% correct. It means `Substitute User' and not `Super User'. With su you can become any user in the /etc/passwd file, giving just su with no username defualts to a root level priviledge of su. I am no sure when people started calling su `Super User', it is appropriate for the access granted by the command in my opinion even though it is not exactly correct.Quote:
But I believe SU stands for Substitute User (Not SuperUser), and you invoke it like such:
There's actually an entry in most sshd_config files that reads:Quote:
Half^A^Biscuit wrote:
by default.. linux (last version i was with was 5.1 before moving to BSD) and FreeBSD will not allow you to login via telnet
this is for security reasons, ie. it makes it easier to spot intruders playing mr admin
therefore you need to su (basically asume that login in newbie terms)
this means that by having to su to root, it makes it harder for lamers to break into you machines.
PermitRootLogin {yes|no}
The default on RH7.1 was yes.
I generally only keep /dev/tty1 in /etc/securtty, that way even if there's a misconfigured SSHD or something, you can only log in if you're sitting in front of my PC.
Also note that when you ARE root, and you use su to another username, you aren't prompted for a password.Quote:
psi0nic wrote:
That is 100% correct. It means `Substitute User' and not `Super User'. With su you can become any user in the /etc/passwd file, giving just su with no username defualts to a root level priviledge of su. I am no sure when people started calling su `Super User', it is appropriate for the access granted by the command in my opinion even though it is not exactly correct.
Thanks for everybodys help on this.
A few comment : NEVER EVER NEVER EVER telnet to your box and then make a "su root". This is the worse think to do concerning security. You have the openssh (www.openssh.org) that for, i mean on the fly cryptography for your packet.
Do you REALLY want you login/password be sent in clear text all around the world ? I'am sure you don't, so move to openSSH. They have both server and client softs, + howto faqs.
Then you also telnetssh from a windows box with advanced telnet client like "putty".
A+ hantiz.
Root logins are restricted in 'generic' installs for RH (and other flavors) as a security measure. If you *really* want to use it remotely, do like these guys said and get ssh (www.openssh.org) or take a chance and hack /etc/securetty.
For extra info, the reason your 'test root account' didn't work is probably because the UID was set for 0, which == root. All user accounts are assigned unique (99.9% of the time) UIDs and everything is based off that UID. In 'restricted remote root login denial' code, it simply checks to see if your UID is 0. If so, deny.
However, with your tty/pty in /etc/securetty, if you're coming from a pty listed, you can log in as root.
Security measures I suggest for telnet:
1: comment out telnet in /etc/services and disable it in /etc/xinetd.d/telnet by doing 'disable = yes'. Restart xinetd (ps -ef | grep xinetd | awk '{ print $1 }' | xargs kill -HUP).
2: download SSH and install it to use port 22 for secure encrypted communication. It's the de facto standard for a LOT of places now and it's free for private/educational use.
Hope this helps!
Security = 1 / convenience (as stated in the USAH by Evi Nemeth who I got to meet at the LISA '99! I'm not worthy!)