[gentoo-dev] How to allow su and ssh access

[gentoo-dev] How to allow su and ssh access

[Robert Schrem]

I feel pretty comfortable with using gentoo (now for
almost 3 weeks) but I have still some problems that I
clould not solve so far. The most important is this one:

I'am wondering where to locate the 'switch' to allow
users (at least myself) to use the su command to get
temporary root rights. Also I would like to be able to 
login as root via ssh. This is obviously blocked
somewhere in the configuration files.

Any hint what configuration file(s) I should 
examin (tried already some in /etc/security
but didn't get it done)...

Anybody?

Re: [gentoo-dev] How to allow su and ssh access

[Achim Gottinger]

Robert Schrem wrote:

> I feel pretty comfortable with using gentoo (now for
> almost 3 weeks) but I have still some problems that I
> clould not solve so far. The most important is this one:
>
> I'am wondering where to locate the 'switch' to allow
> users (at least myself) to use the su command to get
> temporary root rights.

You must add the users to the wheel group in /etc/groups

> Also I would like to be able to
> login as root via ssh. This is obviously blocked
> somewhere in the configuration files.

Normaly this is only blocked if you have no root password.

How about the @ in kde?

Bye Achim

>
>
> Any hint what configuration file(s) I should
> examin (tried already some in /etc/security
> but didn't get it done)...
>
> Anybody?
> _______________________________________________
> gentoo-dev mailing list
> gentoo-dev@gentoo.org
> http://www.gentoo.org/mailman/listinfo/gentoo-dev

Re: [gentoo-dev] How to allow su and ssh access

[Jerry A!]

On Wed, Jan 24, 2001 at 10:47:28AM +0100, Robert Schrem wrote:
: I feel pretty comfortable with using gentoo (now for
: almost 3 weeks) but I have still some problems that I
: clould not solve so far. The most important is this one:
: 
: I'am wondering where to locate the 'switch' to allow
: users (at least myself) to use the su command to get
: temporary root rights. Also I would like to be able to 
: login as root via ssh. This is obviously blocked
: somewhere in the configuration files.
: 
: Any hint what configuration file(s) I should 
: examin (tried already some in /etc/security
: but didn't get it done)...

I won't answer your questions directly.  What I will do is point you to
the suauth(5) and sshd(8) manpages.  Likewise, take a look at
/etc/suauth and /etc/ssh/sshd_config.

        --Jerry

name:  Jerry Alexandratos         ||  Open-Source software isn't a
phone: 703.599.6023               ||  matter of life or death...
email: jerry@akopia.com           ||  ...It's much more important
                                  ||  than that!

Re: [gentoo-dev] How to allow su and ssh access

[Robert Schrem]

>> I'am wondering where to locate the 'switch' to allow
>> users (at least myself) to use the su command to get
>> temporary root rights.

> You must add the users to the wheel group in /etc/groups

Wow! This worked out - you just have to know it,
otherwise you search for a while...

>> Also I would like to be able to
>> login as root via ssh. This is obviously blocked
>> somewhere in the configuration files.

> Normaly this is only blocked if you have no root password.

The authentification works, but the connection is 
aborted immediatly. I will try to solve the puzzle
with the help of Jerry's hints...

Thanxxx! 

Re: [gentoo-dev] How to allow su and ssh access

[Achim Gottinger]

Robert Schrem wrote:

> >> I'am wondering where to locate the 'switch' to allow
> >> users (at least myself) to use the su command to get
> >> temporary root rights.
>
> > You must add the users to the wheel group in /etc/groups
>
> Wow! This worked out - you just have to know it,
> otherwise you search for a while...
>
> >> Also I would like to be able to
> >> login as root via ssh. This is obviously blocked
> >> somewhere in the configuration files.
>
> > Normaly this is only blocked if you have no root password.
>
> The authentification works, but the connection is
> aborted immediatly. I will try to solve the puzzle
> with the help of Jerry's hints...

Another hint take a look at /etc/ssh, there must be
ssh_host_dsa_key[.pub] ssh_host_key[.pub].
These get normaly gererated automatic by the sshd strat-script.

>
>
> Thanxxx!
> _______________________________________________
> gentoo-dev mailing list
> gentoo-dev@gentoo.org
> http://www.gentoo.org/mailman/listinfo/gentoo-dev

Re: [gentoo-dev] How to allow su and ssh access

[mats pettersson]

On Thu, 25 Jan 2001, Achim Gottinger wrote:

> Robert Schrem wrote:
>
> > >> I'am wondering where to locate the 'switch' to allow
> > >> users (at least myself) to use the su command to get
> > >> temporary root rights.
> >
> > > You must add the users to the wheel group in /etc/groups
> >
> > Wow! This worked out - you just have to know it,
> > otherwise you search for a while...
> >
> > >> Also I would like to be able to
> > >> login as root via ssh. This is obviously blocked
> > >> somewhere in the configuration files.
> >
> > > Normaly this is only blocked if you have no root password.
> >
> > The authentification works, but the connection is
> > aborted immediatly. I will try to solve the puzzle
> > with the help of Jerry's hints...
>
> Another hint take a look at /etc/ssh, there must be
> ssh_host_dsa_key[.pub] ssh_host_key[.pub].
> These get normaly gererated automatic by the sshd strat-script.

is it set to be allowed as default root on sshd in the in the current
gentoo version ? other wise check /etc/ssh/sshd_config PermitRootLogin yes

>
> >
> >
> > Thanxxx!
> > _______________________________________________
> > gentoo-dev mailing list
> > gentoo-dev@gentoo.org
> > http://www.gentoo.org/mailman/listinfo/gentoo-dev
>
> _______________________________________________
> gentoo-dev mailing list
> gentoo-dev@gentoo.org
> http://www.gentoo.org/mailman/listinfo/gentoo-dev
>

-- 

Located @ N65°61746' E22°12535' (WGS84)
------ Hiroshime 45, Tjernobyl 86, Windows 95, Windows 98, WinY2K ------
Unix IS user friendly --- its just selective about who its friends are.