[TriLUG] how does one permit root telnet

Ryan Leathers Ryan.Leathers at globalknowledge.com
Tue Sep 28 09:21:03 EDT 2004


Thanks Tanner.  In this particular case I have commented out the line
pam_securetty.so found in /etc/pam.d/login

It works like a charm.  Thanks for the quick response :)

-----Original Message-----
From: Tanner Lovelace [mailto:clubjuggler at gmail.com]
Sent: Tuesday, September 28, 2004 8:59 AM
To: Triangle Linux Users Group discussion list
Subject: Re: [TriLUG] how does one permit root telnet


You probably need to change telnet's pam configuration.  First, make sure
you actually have a telnet server installed. :-)  Then, take a look at the
files in /etc/pam.d/.  There should be a file in there called telnet.  If
you
remove the line with "pam_securetty.so" on it, you won't have to mess
with securetty for telnet (a bad idea, but you've already acknowledged
that so I won't belabor the point too much).  Otherwise, I'd suggest making
the file similar to the pam "login" file.

If you're running mandrake, you'll need to add one or both of the following
statements to /etc/security/msec/level.local:

allow_remote_root_login(1)
allow_root_login(1)

(And also make sure that file has this line at the top:
from mseclib import *
so as to not get errors, since I'm pretty sure that file just gets
interpreted as python code.)

Cheers,
Tanner Lovelace
On Tue, 28 Sep 2004 08:53:17 -0400, Ryan Leathers
<ryan.leathers at globalknowledge.com> wrote:
> You don't hear this one every day.
> I need to allow root telnet access to a Linux host.
> I think I need to modify /etc/securetty to permit this but I'm not sure
> exactly how, and my experiments so far are fruitless.
> Anyone know?
> 
> To prevent a flood of replies encouraging the use of SSH let me just say:
in
> this unique case telnet is the ONLY choice.
> 
> Ryan
> 
> --
> TriLUG mailing list        : http://www.trilug.org/mailman/listinfo/trilug
> TriLUG Organizational FAQ  : http://trilug.org/faq/
> TriLUG Member Services FAQ : http://members.trilug.org/services_faq/
> TriLUG PGP Keyring         : http://trilug.org/~chrish/trilug.asc
>
-- 
TriLUG mailing list        : http://www.trilug.org/mailman/listinfo/trilug
TriLUG Organizational FAQ  : http://trilug.org/faq/
TriLUG Member Services FAQ : http://members.trilug.org/services_faq/
TriLUG PGP Keyring         : http://trilug.org/~chrish/trilug.asc



More information about the TriLUG mailing list