Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 6 Apr 1998 09:19:57 -0500 (CDT)
From:      Val <val@hcol.net>
To:        Ross McFarland <rwmcfa1@pop.uky.edu>
Cc:        freebsd-questions@FreeBSD.ORG
Subject:   Re: the su command and specifing who can telnet
Message-ID:  <Pine.BSF.3.96.980406091536.3996A-100000@ns.hcol.net>
In-Reply-To: <000d01bd60be$2d7a89a0$896969ce@win95-133>

next in thread | previous in thread | raw e-mail | index | archive | help
On Sun, 5 Apr 1998, Ross McFarland wrote:

> 1) I've found and understand how the ftp access is controlled by a file, where and\or how can I control who can access the server by Telnet?  I have a user name for apache to run under and would like to restrict its ability to log in from any where other than the console.
I think it's called /etc/login.access
but on my system originally it was set up do deny login to anyone other
from the console, so I had to put in some ips in there and now i can
telnet from those ips.  You can also control usernames that can telnet
into the system from there.


> 2) how do I allow a user to su to root.  I've tried setting group to 0(wheel) and using the log in class root, staff and everything else I can think of in every combination.  when I try it always says
We use sudo port to let users run commands as root.
it's one of the ports.  this way you don't need to tell them the root
password.  Every action is logged into the /var/log/messages and there are
some other precausions i think, like you can't delete root, etc.
Access to sudo command is controlled by the file: sudoers.

regards,
Val.


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.3.96.980406091536.3996A-100000>