From owner-freebsd-questions Sun Apr 5 11:14:31 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id LAA19192 for freebsd-questions-outgoing; Sun, 5 Apr 1998 11:14:31 -0700 (PDT) (envelope-from owner-freebsd-questions@FreeBSD.ORG) Received: from smtp.uky.edu (smtp.uky.edu [128.163.1.168]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id LAA19183 for ; Sun, 5 Apr 1998 11:14:22 -0700 (PDT) (envelope-from rwmcfa1@pop.uky.edu) Received: from pop.uky.edu (pop.uky.edu [128.163.1.174]) by smtp.uky.edu (8.8.8/8.8.5) with ESMTP id OAA16134 for ; Sun, 5 Apr 1998 14:14:54 -0400 (EDT) Received: from win95-133 (lex8.kih.net [206.105.105.137]) by pop.uky.edu (8.8.4/(UKY.POP.1.4)) with SMTP id OAA17640 for ; Sun, 5 Apr 1998 14:10:27 -0400 (EDT) Message-ID: <000d01bd60be$2d7a89a0$896969ce@win95-133> From: "Ross McFarland" To: Subject: the su command and specifing who can telnet Date: Sun, 5 Apr 1998 14:10:53 -0400 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_000A_01BD609C.A4E86420" X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 4.72.2106.4 X-MimeOLE: Produced By Microsoft MimeOLE V4.72.2106.4 Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG This is a multi-part message in MIME format. ------=_NextPart_000_000A_01BD609C.A4E86420 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable I have two hopefully quick questions. 1) I've found and understand how the ftp access is controlled by a file, = where and\or how can I control who can access the server by Telnet? I = have a user name for apache to run under and would like to restrict its = ability to log in from any where other than the console. 2) how do I allow a user to su to root. I've tried setting group to = 0(wheel) and using the log in class root, staff and everything else I = can think of in every combination. when I try it always says FreeBSD 20: su something about kerberos (how ever it's spelled) passwd not found and = not being in root's ACL something about not being in the correct group to su to root FreeBSD 21: this message is always given to me no matter how I've tried to set group = id and login class, I assume that ACL is Access Control List but have no = idea where it is or how to set it up. I've looked numerous times through the man, doc, and FAQ, along with = other UNIX documents and up to this point I've come up empty.=20 any help you all could give would be greatly appreciated=20 thanks in advance, Ross McFarland rwmcfa1@pop.uky.edu http://sac.uky.edu/~rwmcfa1/ ------=_NextPart_000_000A_01BD609C.A4E86420 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable

I have two hopefully quick=20 questions.

1) I've found and understand how the = ftp access=20 is controlled by a file, where and\or how can I control who can access = the=20 server by Telnet? I have a user name for apache to run under and = would=20 like to restrict its ability to log in from any where other than the=20 console.

2) how do I allow a user to su to = root. =20 I've tried setting group to 0(wheel) and using the log in class root, = staff and=20 everything else I can think of in every combination. when I try it = always=20 says

FreeBSD 20: = su

something about kerberos (how ever = it's spelled)=20 passwd not found and not being in root's ACL

something about not being in the = correct group=20 to su to root

FreeBSD 21:

this message is always given to me = no matter how=20 I've tried to set group id and login class, I assume that ACL is Access = Control=20 List but have no idea where it is or how to set it up.

I've = looked numerous=20 times through the man, doc, and FAQ, along with other UNIX documents and = up to=20 this point I've come up empty.

any help you all could give would be = greatly=20 appreciated

thanks in=20 advance,

Ross McFarland
rwmcfa1@pop.uky.edu
http://sac.uky.edu/~rwmcfa1/

------=_NextPart_000_000A_01BD609C.A4E86420-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message