topic Re: root login in Operating System - Linux

root login

eric_204 — Fri, 14 Nov 2003 08:17:01 GMT

My RH 7 system don't access user to directly login as root on the remote desktop - root user need to login as general user and then su as root , could suggest how to disable this function so that root user can login as root in any desktop ? thx

Re: root login

Madhu Sudhan_1 — Fri, 14 Nov 2003 08:35:15 GMT

Add pts/1 ....pts/10 and so in /etc/securetty for the root use to be able to login remotely or use ssh with PermitRootLogin yes set in sshd_config. This requires you to bounce sshd.

HTH
-Madhu

Re: root login

Jerome Henry — Fri, 14 Nov 2003 08:38:00 GMT

That's part of a normal security process. You should always log in as user, su - root, and then perform admin actions, such as login to remote desktops.
Two solutions :
- upgrade (kidding :]] )
- Add these lines to /etc/securetty:
0
1
2
3
4
5
6
7
8
9
It should work. If not, post the exact error message...

hth

J

Re: root login

eric_204 — Fri, 14 Nov 2003 08:38:04 GMT

thx reply, but i can't find the pts in /etc/securetty , can suggest other solution ? thx.

Re: root login

Mark Grant — Fri, 14 Nov 2003 08:41:37 GMT

Just remove /etc/securetty if you are not too worried about the issues.

Re: root login

Steven E. Protter — Fri, 14 Nov 2003 09:54:02 GMT

You could maintain the security, issue the user a normal user id.

After login, su - root
give the root password.

SEP

Re: root login

eric_204 — Fri, 14 Nov 2003 20:30:27 GMT

my /etc/securetty like the below , just remove the file or just remove one of entry ? thx

vc/1
vc/2
vc/3
vc/4
vc/5
vc/6
vc/7
vc/8
vc/9
vc/10
vc/11
tty1
tty2
tty3
tty4
tty5
tty6
tty7
tty8
tty9
tty10
tty11
rsh
rlogin

Re: root login

eric_204 — Fri, 14 Nov 2003 22:01:16 GMT

We are using the telnet as the login tools in the system , could suggest what can i do to disable this function ? thx.

Re: root login

Mark Grant — Sat, 15 Nov 2003 07:32:16 GMT

eric, just mv the file to a different name (so that you can move it back if you want).

Re: root login

Jerome Henry — Sat, 15 Nov 2003 08:21:05 GMT

Better use ssh.
To disable telnet, go to /etc/xinetd.d/, edit telnet, and set disable to yes.
Better do the same for rlogin too.

J