root cannot login through CDE except console CDE

[kashi_1]

hi,
Only root user cannot log in from CDE install on systems in network except CDE at console. Is there any entry which doesnot allow specific user to login from CDE at other systems in network.

[Vladimir Fabecic]

That is normal. If you want to enable CDE root login from network, add an entry in /etc/securettys.
See man securettys.

[kashi_1]

hi Fababic,
i ve made the adviced changes but still it is not working .....
Is there any way around..
thanks

[Brendan Murphy_5]

How about posting the entry you made to /etc/securettys.

Also what are you using to get to the CDE login screen?

Regards

Brendan

[kashi_1]

using X window.

Changes made:

/dev/console
:0
/dev/tty00
ptys

[Ann Majeske]

See:
http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=996568

[Balasubramanian S]

Hello, I guess you need to add the system name/ip address, where you are trying to CDE as root in the securettys file.

Thanks,
-Bala S

[Vladimir Fabecic]

OK, I will make an example.
Lets say your PC host name is winbl (ip address is defined in /etc/hosts).
So entry should be:
/dev/console
:0
winbl:0
/dev/tty00
ptys


Notice that :0 means display 0. If using other display, for example display 1, then entry should be:
winbl:1

[Balasubramanian S]

Hello, you can refer the following link for more details.

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=182228&admit=-682735245+1153221893761+28353475

-Bala S

[kashi_1]

Thanks a lot for all the replies. i will try it n contact u ppl soon.

[Rick Retterer]

Typically, when you are trying to login as root from a PC using a PC Xserver, the thing to do is to check the file:

/var/adm/syslog.dated/current/auth.log

You will see an entry that reads something like this:

ROOT LOGIN REFUSED 16.113.39.97:0
-or-
ROOT LOGIN REFUSED hostname.full.domain:0

You *MUST* place the *EXACT* ipaddress:0 or hostname.full.domain:0 syntax in your /etc/securettys file.

So that /etc/securettys entry would look like this:

/dev/console
local:0
:0
16.113.39.97:0

-or-

/dev/console
local:0
:0
hostname.full.domain:0

Then save the file and try to login again.


Of course, if you are using C2 security there are other steps also required to allow you to connect and login as root.

But, for BASE security, that is all that is required. I would like to recommend that you NOT remove the /etc/securettys file as previously mentioned, for security reasons of course.

cheers,

Rick Retterer
HP Services

[kashi_1]

Thanks a lot for all your help. its working now after editing /etc/hosts and /etc/securettys

[kashi_1]

found solution as mentioned by viladmir Fabebic.

edited /etc/securettys

dev/console
:0
{hostname of PC}:0
/dev/tty00
ptys

thanks alot