BSD root issues

pariahservers · 02-04-2004, 12:07 AM

I have recently install a new bsd box and i would like to enable root logins through ssh from differenet hosts other than the localhost. What to i need to change to be able to login from my home pc to the box using root as the user.

Another problem i hav is tha i can't su once im logged into the box with my username. How can i get that working aswell?

any help would be appreciated.

chort · 02-04-2004, 04:06 AM

I would strongly advise against allowing root to login via ssh, that is just asking for trouble.

On BSD you must be a member of the "wheel" group in order to su to root. Again though, su'ing to root is not advised. You should investigate and implement sudo for administration tasks. That will let you run individual commands with root privilages.

frob23 · 02-04-2004, 01:28 PM

I would also highly recommend avoiding this. If you insist on doing this change some of the
ttyp* none network
lines in /etc/ttys to
ttyp* none network secure

/etc/ssh/sshd_config: add the line
PermitRootLogin yes

This should do it... PLEASE DO NOT DO IT THOUGH. Just because it is possible doesn't make it wise... just login as yourself, have yourself in the wheel group, and su -.

That should work fine...

frob23 · 02-04-2004, 08:43 PM

Oh, adding yourself to the wheel group.

/etc/group:

wheel:*:0:root,your_username

witeshark · 02-05-2004, 11:47 PM

Quote:

Originally posted by chort
I would strongly advise against allowing root to login via ssh, that is just asking for trouble.

On BSD you must be a member of the "wheel" group in order to su to root. Again though, su'ing to root is not advised. You should investigate and implement sudo for administration tasks. That will let you run individual commands with root privileges.

Here is what I would say, because it's so like the Mac I now use and love! Nice, Chort, couldn't add a character to this post

my

su to root really must be a local function only

pariahservers · 02-10-2004, 11:42 AM

ok shot okes!

i got it working.. and i took your advice and i added myself to the wheel group.

Thanks alot!