LinuxQuestions.org
Help answer threads with 0 replies.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Fedora
User Name
Password
Fedora This forum is for the discussion of the Fedora Project.

Notices



Reply
 
Search this Thread
Old 08-15-2006, 12:23 PM   #1
mrdesai
LQ Newbie
 
Registered: Nov 2003
Distribution: FC5 and Suse
Posts: 15

Rep: Reputation: 0
Disabling root login and using another username for administration


hello there,

I am using a server with fc5 installed and wish to disable login in via Root. I still need permissions to do adminstrative tasks remotely so need to create a new user which has root permissions.

I cannot find any info in the fedora forum to do this and am not sure instructions for other distributions will apply to FC5.

So anyone has any guidelines on this?

Oh yes and I use telnet to login not SSH.
cheers!

Last edited by mrdesai; 08-15-2006 at 12:25 PM.
 
Old 08-15-2006, 12:30 PM   #2
b0uncer
Guru
 
Registered: Aug 2003
Distribution: CentOS, OS X
Posts: 5,131

Rep: Reputation: Disabled
First of all, you cannot create more than one root user. The closest you can get, probably, is to let one user use sudo to accomplish the tasks which need superuser privileges. In this matter it's wise to only grant superuser privileges to the commands you'll be needing -- not to everything. What use would it be if you disabled your root account and then created another one? The point in disabling the root account is that all the other accounts are non-privileged to do most of the things root can do. Then, with sudo, certain users can be given the chance to, by giving their password when starting sudo, run some things as root (but not everything, since that would compromise the whole idea).

List the things you need to do, grant some user sudo rights for them, disable root account and keep a hard eye on your logs. And do NOT let anyone use sudo without passwords. More importantly, don't let anybody use sudo if it's really not needed. The less root privileges, the less trouble.
 
Old 08-15-2006, 12:34 PM   #3
mrdesai
LQ Newbie
 
Registered: Nov 2003
Distribution: FC5 and Suse
Posts: 15

Original Poster
Rep: Reputation: 0
Hi Bouncer,

Quote:
Originally Posted by b0uncer
What use would it be if you disabled your root account and then created another one?
The main reason is to block bruteforce attacks using root as the username. I'd want to keep a difficult username and an difficult password and yes I would keep an eye on all root logins. However, we have a company firewall which only allows SSH/Telnet connections internally so chance to anyone getting through is less, this is just an extra security measure.

cheers!
 
Old 08-15-2006, 01:08 PM   #4
michaelk
Moderator
 
Registered: Aug 2002
Posts: 12,165

Rep: Reputation: 784Reputation: 784Reputation: 784Reputation: 784Reputation: 784Reputation: 784Reputation: 784
If you are using telnet then the extra security measure will not help since passwords are sent as clear text. You should disable telnet and root logins for ssh. Login with regular user then su for admin tasks.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
The box is not able to determine username while I login other than root on RHEL4 abhi_raj Linux - General 4 07-20-2006 01:55 PM
tightvnc - disabling 'remote administration' message mazinoz Linux - Security 6 03-17-2006 06:11 PM
Cannot login without Username, help! utcltjay Linux - General 1 09-06-2005 06:18 PM
Root Server administration Boby Linux - Security 3 12-23-2004 06:03 PM
Disabling root login via SSH moger Linux - Security 7 06-20-2004 04:55 PM


All times are GMT -5. The time now is 08:04 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration