Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 11 Mar 2007 10:52:55 +0000
From:      Howard Jones <howie@thingy.com>
To:        Wojciech Puchar <wojtek@tensor.gdynia.pl>, freebsd-questions@freebsd.org
Subject:   Re: [freebsd-questions] root login with telnetd
Message-ID:  <45F3DF87.1090503@thingy.com>
In-Reply-To: <20070311081618.F66000@chylonia.3miasto.net>
References:  <20070310224946.K10353@chylonia.3miasto.net> <20070311081618.F66000@chylonia.3miasto.net>

next in thread | previous in thread | raw e-mail | index | archive | help
Wojciech Puchar wrote:
>> can it be set to make possible to login root to machine through 
>> telnet and without telneting to some user and then su -
>> ?
>>
>> with sshd and rshd it can be set, with telnetd - no success.
>>
> once again - can someone answer my question instead of giving very 
> "intelligent" comments?
> _______________________________________________
If I remember correctly, you edit /etc/ttys and set some of your ttyp* 
(i.e. network ptys) to be 'SECURE'. It really isn't a good idea though. 
The reason I don't remember is that I haven't done it in about 10 years.

If it's a remote program that needs root access, you can probably do 
something with ssh - you can allow ssh RootLogin, but not with passwords 
only public key auth, and you can *also* limit the key to be allowed to 
only connect from certain addresses and only run specific commands (e.g. 
some backup software works this way). You can have multiple keys with 
different restrictions even - Host A can run rsync only, and host B can 
run rdiff-backup only.

Howie



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?45F3DF87.1090503>