web console

[Ragni Singh]

Can someone please tell me how would I go about disabling root login on the web console. I dont want root login in through the web console. Any help will be greatly appreciated.

[Craig Rants · Accepted solution]

Do you have a /etc/securetty file. If so make sure that the console entry is NOT in that file. If the file does not exist, touch the file.

Beware if the file does not exist and you touch that file, you cannot login as root at all, unless you are using ssh or something else. Also if you need console access and remove the web console in favor of a regular console the same rules apply.

Good Luck,
C

[Santosh Nair_1]

I don't think you can disable root logins from the webconsole since the webconsole is effectively the real console. Besides, it probably wouldn't be a good idea since it sort of defeats the purpose of having the web console (you could just telnet into the machine rather than use webconsole).

-Santosh

[Darrell Allen]

Hi,

The web console IS the console. I believe I'd make sure root can login on the console regardless.

If you really do want to disallow root login from the console, I believe Craig has the answer. I haven't tried that so let us know if you do and it works.

Darrell

[Bernie Vande Griend]

Since web console becomes the console, not allowing root to login from the console may lead to problems down the road. This is especially true if your system is Trusted. If someone tries an incorrect password for root multiple times, it will lock out that account and the only way to fix it would be to log in from the console. IMO, the console is the only place root should be allowed to log in directly. I would focus on security for the web console instead, which is one reason I don't prefer them, as the security could be better.

[Ragni Singh]

Thanks for all the help guys.