From owner-freebsd-current@FreeBSD.ORG Wed Mar 25 17:17:59 2009 Return-Path: Delivered-To: current@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id CB29210656C4 for ; Wed, 25 Mar 2009 17:17:59 +0000 (UTC) (envelope-from julian@elischer.org) Received: from outF.internet-mail-service.net (outf.internet-mail-service.net [216.240.47.229]) by mx1.freebsd.org (Postfix) with ESMTP id AEDC68FC19 for ; Wed, 25 Mar 2009 17:17:59 +0000 (UTC) (envelope-from julian@elischer.org) Received: from idiom.com (mx0.idiom.com [216.240.32.160]) by out.internet-mail-service.net (Postfix) with ESMTP id 5F0AC60462; Wed, 25 Mar 2009 10:18:18 -0700 (PDT) X-Client-Authorized: MaGic Cook1e X-Client-Authorized: MaGic Cook1e X-Client-Authorized: MaGic Cook1e X-Client-Authorized: MaGic Cook1e X-Client-Authorized: MaGic Cook1e Received: from julian-mac.elischer.org (home.elischer.org [216.240.48.38]) by idiom.com (Postfix) with ESMTP id BAC912D6010; Wed, 25 Mar 2009 10:17:56 -0700 (PDT) Message-ID: <49CA6754.4030302@elischer.org> Date: Wed, 25 Mar 2009 10:18:12 -0700 From: Julian Elischer User-Agent: Thunderbird 2.0.0.21 (Macintosh/20090302) MIME-Version: 1.0 To: Ian FREISLICH References: <995845.90009.qm@web63905.mail.re1.yahoo.com> In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: barney_cordoba@yahoo.com, Ruben de Groot , Chuck Robey , current@freebsd.org Subject: Re: Telnet root login X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 25 Mar 2009 17:18:02 -0000 Ian FREISLICH wrote: > Barney Cordoba wrote: >>> Barney, you have to make the network pseudo ttys secure, >>> like: >>> >>> ttyp0 none network secure >>> >>> Ruben >> Yes, the "its not a good idea" is dependent on whatever other >> security you have in place. Having to log in twice to a test >> machine on a secure internal network is an unnecessary annoyance. >> The concept that every FreeBSD box in existence is publically accessible >> is one of those ASSumptions that people should leave at the door. >> >> Ruben, the method you cite no longer works in -current as they've >> changed things once again (which happens way too often when your CEOs >> are a bunch of bearded academics :) >> >> I'm not sure if its the pty (the login terminal shows as pty/0 and >> no longer ttyp0), or if its some PAM thing. Its rather annoying. >> Such things as >> >> pty/0 none network secure >> pty0 none network secure >> >> equally don't work. And I see no mention in any document as to how it >> would be achieved with the current > > Then use ssh and set "PermitRootLogin yes" in /etc/ssh/sshd_config this doesn't work if you are usinf a set of machines run from a central machine using nc (netcat) to do scripted i/o through a telnet session on the other machines (for example). The advantage of telnet is you can pipe nc straight into it. > > Ian > > -- > Ian Freislich > _______________________________________________ > freebsd-current@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-current > To unsubscribe, send any mail to "freebsd-current-unsubscribe@freebsd.org"