You are correct.  I suggest implementing OpenSSH v2.

Christian

Christian P. Campbell
Systems Engineer
Information Technology Department - Systems
Bruegger's Enterprises
Desk: (802) 652-9270
Cell: (802)734-5023
Email:  [EMAIL PROTECTED]
PGP public key available via PGP keyserver

"One of the most overlooked advantages to computers
is...  If they do foul up, there's no law against whacking
them around a little."    -- Joe Martin



-----Original Message-----
From: John Nichel [mailto:[EMAIL PROTECTED]
Sent: Tuesday, February 25, 2003 1:26 PM
To: [EMAIL PROTECTED]
Subject: Re: telnet with root


Curious here....if I telnet into my system as a regular user, then su to 
root, aren't I sending my password in plain text across the network?

Jeff Kinz wrote:
> On Tue, Feb 25, 2003 at 03:41:28PM +0100, Vincent Couvreur wrote:
> 
>>I use Redhat 8.0
>>When i want to telnet my server with the user root, it says me that it' s
a "Login incorrect".
>>
>>But when i use another user, it's ok.
>>
>>I know it's for a pb of security, but can you tell me how to do it.
>>
>>Thanks
> 
> 
> yep, definitely a no-no.  Anyone running tcpdump or ethereal or any one of
> dozens of linux or Windows packet sniffers can snatch your root password
off
> the LAN.  If your not worried about that then add the names of the tty
lines
> you wish to be able to login as root from to the file /etc/securetty
> 
> The file can look like this:
> [EMAIL PROTECTED] root]# cat /etc/securetty
> vc/1
> vc/2
> vc/<N>
> ..
> 




-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list



-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list

Reply via email to