Telnet as root!
14 отговора
767 прегледа
Telnet as root!
Някой може ли да ми каже как да разреша на root да прави telnet към host'a?
ps: само не ми казвайте да си разреша терминала от /etc/sequretty!
не става! вече пробвах!
BTW варианта със SSH също не ми върши работа
ps: само не ми казвайте да си разреша терминала от /etc/sequretty!
не става! вече пробвах!
BTW варианта със SSH също не ми върши работа
Редактирано от dOOmEr на
Re: Telnet as root!
Ami root ne mozhe da prawi telnet. Trqbwa da se log-nesh kato drug user i sled towa da kave[ "su".
Towa bilo dopylnitelna mqrka za sigurnost - da snae[ 2 paroli za da move[ da se log-ne[ kato root
Towa bilo dopylnitelna mqrka za sigurnost - da snae[ 2 paroli za da move[ da se log-ne[ kato root
Re: Telnet as root!
Eto moja /etc/securetty s kojto se logvam kato root:
--------------------------------------------------------------
# This file defines which devices root can log in on.
# These are the ttys on the physical console:
console
tty1
tty2
tty3
tty4
tty5
tty6
# These are remote ttys, and uncommenting them might be less than fully secure:
ttyS0
ttyS1
ttyS2
ttyS3
ttyp0
ttyp1
ttyp2
ttyp3
pts/0
pts/1
pts/2
--------------------------------------------------------
(Slackware 7.0)
--------------------------------------------------------------
# This file defines which devices root can log in on.
# These are the ttys on the physical console:
console
tty1
tty2
tty3
tty4
tty5
tty6
# These are remote ttys, and uncommenting them might be less than fully secure:
ttyS0
ttyS1
ttyS2
ttyS3
ttyp0
ttyp1
ttyp2
ttyp3
pts/0
pts/1
pts/2
--------------------------------------------------------
(Slackware 7.0)
Re: Telnet as root!
prosto iztrii /etc/securetty
t.e. rm -f /etc/securetty
inache root shte se logne po telnet .. drug put.. i btw
NIKAK ne e jelatelno root da moje da se logva po telnet, ne sluchaino horata sa go napravili tolkova muchno da stava ... imai go predvid
waiting... dreaming... wishing...
t.e. rm -f /etc/securetty
inache root shte se logne po telnet .. drug put.. i btw
NIKAK ne e jelatelno root da moje da se logva po telnet, ne sluchaino horata sa go napravili tolkova muchno da stava ... imai go predvid
waiting... dreaming... wishing...
Re: Telnet as root!
Toja linux e wyw wytre6nata mreja i ne se wijda na wyn! taka 4e spokojno 

Re: Telnet as root!
По принцип правилата за това кой/откъде/как да (не) се логва се определя и конфигурира чрез "Login access control table":
/etc/login.access - SlackWare
/etc/security/access.conf - RedHat, Mandrake etc.
#Login access control table.
#
# When someone logs in, the table is scanned for the first entry that
# matches the (user, host) combination, or, in case of non-networked
# logins, the first entry that matches the (user, tty) combination. The
# permissions field of that table entry determines whether the login will
# be accepted or refused.
#
# Format of the login access control table is three fields separated by a
# ":" character:
#
# permission : users : origins
#
# The first field should be a "+" (access granted) or "-" (access denied)
# character.
#
# The second field should be a list of one or more login names, group
# names, or ALL (always matches). A pattern of the form user@host is
# matched when the login name matches the "user" part, and when the
# "host" part matches the local machine name.
#
# The third field should be a list of one or more tty names (for
# non-networked logins), host names, domain names (begin with "."), host
# addresses, internet network numbers (end with "."), ALL (always
# matches) or LOCAL (matches any string that does not contain a "."
# character).
#
# If you run NIS you can use @netgroupname in host or user patterns; this
# even works for @usergroup@@hostgroup patterns. Weird.
#
# The EXCEPT operator makes it possible to write very compact rules.
#
# The group file is searched only when a name does not match that of the
# logged-in user. Both the user's primary group is matched, as well as
# groups in which users are explicitly listed.
#
####################################################
#
# Disallow console logins to all but a few accounts.
#
#-:ALL EXCEPT wheel shutdown sync:console
#
# Disallow non-local logins to privileged accounts (group wheel).
#
#-:wheel:ALL EXCEPT LOCAL .win.tue.nl
#
# Some accounts are not allowed to login from anywhere:
#
#-:wsbscaro wsbsecr wsbspac wsbsym wscosor wstaiwde:ALL
#
# All other accounts are allowed to login from anywhere.
#
Светна се предполагам какво трябва да пипнеш ... не че не става и по гореописания начин, но си е дървения ...
/etc/login.access - SlackWare
/etc/security/access.conf - RedHat, Mandrake etc.
#Login access control table.
#
# When someone logs in, the table is scanned for the first entry that
# matches the (user, host) combination, or, in case of non-networked
# logins, the first entry that matches the (user, tty) combination. The
# permissions field of that table entry determines whether the login will
# be accepted or refused.
#
# Format of the login access control table is three fields separated by a
# ":" character:
#
# permission : users : origins
#
# The first field should be a "+" (access granted) or "-" (access denied)
# character.
#
# The second field should be a list of one or more login names, group
# names, or ALL (always matches). A pattern of the form user@host is
# matched when the login name matches the "user" part, and when the
# "host" part matches the local machine name.
#
# The third field should be a list of one or more tty names (for
# non-networked logins), host names, domain names (begin with "."), host
# addresses, internet network numbers (end with "."), ALL (always
# matches) or LOCAL (matches any string that does not contain a "."
# character).
#
# If you run NIS you can use @netgroupname in host or user patterns; this
# even works for @usergroup@@hostgroup patterns. Weird.
#
# The EXCEPT operator makes it possible to write very compact rules.
#
# The group file is searched only when a name does not match that of the
# logged-in user. Both the user's primary group is matched, as well as
# groups in which users are explicitly listed.
#
####################################################
#
# Disallow console logins to all but a few accounts.
#
#-:ALL EXCEPT wheel shutdown sync:console
#
# Disallow non-local logins to privileged accounts (group wheel).
#
#-:wheel:ALL EXCEPT LOCAL .win.tue.nl
#
# Some accounts are not allowed to login from anywhere:
#
#-:wsbscaro wsbsecr wsbspac wsbsym wscosor wstaiwde:ALL
#
# All other accounts are allowed to login from anywhere.
#
Светна се предполагам какво трябва да пипнеш ... не че не става и по гореописания начин, но си е дървения ...
Вътрешната мрежа......
е толкова враждебна, колкото и външната......
Понякога и повече.
И песента "Това оттам не се вижда" сме я слушали както в добри изпълнения, така и в много фалшиви подделки
...пазете дърветата, не са ваши...
Понякога и повече.
И песента "Това оттам не се вижда" сме я слушали както в добри изпълнения, така и в много фалшиви подделки
...пазете дърветата, не са ваши...
Re: Вътрешната мрежа......
Добре де
да го кажа тогава по друг начин!
Ние сме с модем (т.е. динамични IP'та), имаме си Router с NAT, и на края така наречения Linux сървър, всъщност е пуснат под VMWare, върху Win2000
така че и да успее някой да го Hack'не ...... на мен ще ми е през оная работа тъй като така или иначе си го използвам само за разни експерименти!
Cheers!

Ние сме с модем (т.е. динамични IP'та), имаме си Router с NAT, и на края така наречения Linux сървър, всъщност е пуснат под VMWare, върху Win2000
Cheers!
Аха, звучи добре.....
а какво тогава ти пречеше да използваш ssh? Любопитен съм, не се заяждам.
...пазете дърветата, не са ваши...
...пазете дърветата, не са ваши...
Re: Аха, звучи добре.....
Ами нищо разбира се.
Стандартния Telnet.exe на Windows'a не поддържа SSH, пък и ми се видя сложно настройването му!
Както споменах (или не съм споменал?) не съм си имал много вземане даване с Linux

Както споменах (или не съм споменал?) не съм си имал много вземане даване с Linux
Re: Аха, звучи добре.....
Пробвай putty [линк].
Поддържа ssh и е само 220 K. Или secureCRT.Аз лично съм разкарал телнет на моите машини. Оставил съм само ssh
Поддържа ssh и е само 220 K. Или secureCRT.Аз лично съм разкарал телнет на моите машини. Оставил съм само ssh