topic Re: root should login only through console. in Operating System - HP-UX

root should login only through console.

vijay alur alur — Wed, 25 Apr 2012 19:30:27 GMT

Hi,

i want to configure all my servers such that i cannot login to through root directly. only way login through root is by console. For achieving this i have made an entry in /etc/securetty file with the console written in it. But still i am able to login with root directly. is there anything more i need to do to achieve this?

Thanks,

Vijay

Re: root should login only through console.

Patrick Wallek — Wed, 25 Apr 2012 20:34:15 GMT

>>But still i am able to login with root directly.

How are you logging in? Are you logging in via SSH, telnet, rlogin, X-Windows?

If you are using SSH then the /etc/securetty file is not used. There is an option in ssh_config or sshd_config (I can't remember which one) called ALLOW_ROOT_LOGIN (or something similar). If it is set to YES, change it to no and then restart SSH on the server.

Re: root should login only through console.

vijay alur alur — Wed, 25 Apr 2012 20:42:46 GMT

yes, thanks.

i am loggin through SSH via putty.

that is /opt/ssh/et/sshd_config file and the parameter is permitRootLogin no.

Thanks,

Vijay

Re: root should login only through console.

Doug_Lamoureux — Wed, 25 Apr 2012 21:04:13 GMT

Make sure you have enforcesecuretty set to yes in your sshd_config file. See page 44:

http://bizsupport2.austin.hp.com/bc/docs/support/SupportManual/c03243765/c03243765.pdf

Re: root should login only through console.

Patrick Wallek — Wed, 25 Apr 2012 21:16:58 GMT

@vijay alur alur wrote:
yes, thanks.
i am loggin through SSH via putty.

that is /opt/ssh/et/sshd_config file and the parameter is permitRootLogin no.

Thanks,
Vijay

Very good. I was responding off-the-cuff without double-cheking the files themselves. I'm glad you found what you needed.