atom feed37 messages in org.freebsd.freebsd-questionsroot login with telnetd
FromSent OnAttachments
Wojciech PucharMar 10, 2007 9:51 pm 
Kevin KinseyMar 10, 2007 10:05 pm 
Beech RintoulMar 10, 2007 10:38 pm 
al...@schnarff.comMar 11, 2007 12:17 am 
Wojciech PucharMar 11, 2007 7:13 am 
Wojciech PucharMar 11, 2007 7:16 am 
Garrett CooperMar 11, 2007 7:31 am 
Wojciech PucharMar 11, 2007 7:41 am 
Wojciech PucharMar 11, 2007 7:41 am 
Beech RintoulMar 11, 2007 9:03 am 
Christian WaltherMar 11, 2007 9:43 am 
Wojciech PucharMar 11, 2007 10:07 am 
Wojciech PucharMar 11, 2007 10:08 am 
Howard JonesMar 11, 2007 10:52 am 
Wojciech PucharMar 11, 2007 11:12 am 
Howard JonesMar 11, 2007 11:28 am 
Wojciech PucharMar 11, 2007 12:41 pm 
Sergio LenziMar 11, 2007 2:09 pm 
Sergio LenziMar 11, 2007 2:22 pm 
Wojciech PucharMar 11, 2007 3:55 pm 
Hugo SilvaMar 11, 2007 4:19 pm 
Hugo SilvaMar 11, 2007 4:31 pm 
Paul SchmehlMar 11, 2007 5:11 pm 
Christian WaltherMar 11, 2007 7:52 pm 
Gerard SeibertMar 11, 2007 8:10 pm 
Wojciech PucharMar 11, 2007 8:46 pm 
Sergio LenziMar 11, 2007 8:59 pm 
Gerard SeibertMar 11, 2007 9:03 pm 
Jeff RollinMar 11, 2007 9:58 pm 
Wojciech PucharMar 11, 2007 10:31 pm 
Wojciech PucharMar 11, 2007 10:32 pm 
Wojciech PucharMar 11, 2007 10:39 pm 
Sergio LenziMar 12, 2007 2:00 am 
Wojciech PucharMar 12, 2007 7:47 am 
Sergio LenziMar 12, 2007 1:37 pm 
Sergio LenziMar 12, 2007 1:39 pm 
Chris KottaridisMar 12, 2007 5:13 pm 
Subject:root login with telnetd
From:Garrett Cooper (yous@u.washington.edu)
Date:Mar 11, 2007 7:31:20 am
List:org.freebsd.freebsd-questions

On Mar 10, 2007, at 11:16 PM, Wojciech Puchar wrote:

can it be set to make possible to login root to machine through telnet and without telneting to some user and then su - ?

with sshd and rshd it can be set, with telnetd - no success.

once again - can someone answer my question instead of giving very "intelligent" comments?

Not sure. If I'm reading ttys(5) correctly though this is the section of interest:

``secure'' (if ``on'' is also specified) allows users with a uid of 0 to login on this line. The flag ``dialin'' indicates that a tty entry describes a dialin line, and ``network'' indicates that a tty entry pro- vides a network connection. Either of these strings may also be speci- fied in the terminal type field. The string ``window='' may be followed by a quoted command string which init(8) will execute before starting the command specified by the second field.

So I think that the following would be valid (but possibly dangerous if you use other login daemons like rshd, sshd for logging in remotely); that may be fixable with a firewall though and specific rules to each daemon though.

In ttys (near bottom), instead of:

ttyp0 none network

try:

ttyp0 none network on secure

and repeat for the rest of the ttys you wish to enable the option for.

Why not use root login with telnet or standard getty through serial though :\? -Garrett