allow / deny root logins


 
Thread Tools Search this Thread
Operating Systems AIX allow / deny root logins
# 1  
Old 07-31-2008
allow / deny root logins

Hello everyone

I have to limit the root logins on my aix box (aix 5.3)

I change the value on the /etc/security/user

default (login and rlogin) change to false
and add to root (rlogin and login = false)

I tried in different ways but I got the same.

Root still can login

I try algo with smitty user, change user characteristics (root) change to false
that is the same to the user file

There is another way to limit root login

Thanks for your tips
# 2  
Old 08-01-2008
If you are using sshd on that box, you could configure /etc/ssh/sshd_config to
Code:
PermitRootLogin no

But make sure that you have at least some backdoor to get in like a user that make "sudo su -" or something like that.
# 3  
Old 08-01-2008
This is just a W.A.G.:

The system may be protecting itself from stupidity. Since there are times when you'll need to log on as root, the system may not like you trying to limit access, and is ignoring those limitations.

Why not simply change root's password?
# 4  
Old 08-01-2008
There are usually several ways to reach a goal.
# 5  
Old 08-01-2008
allow / deny root logins

Thanks for the reply

The problem was that I try with a ssh connection and not with telnet connection.

Now itīs ok with telnet connection root login itīs not possible.

and now I change in the /etc/ssh/sshd.conf

# Authentication:

#LoginGraceTime 2m
PermitRootLogin no
#StrictModes yes
#MaxAuthTries 6



But I still can login with root account on a ssh connection. there is another file to change some values ?


Thanks
# 6  
Old 08-02-2008
If you modified the sshd_config file you need to restart sshd
# 7  
Old 08-04-2008
allow / deny root logins

Thanks for the comment E-EJ915

I will do to restart the ssh subsystem. but when I try to su - (switch to root) I got this.

$ su -
root's Password:
3004-311 This terminal can not be used at this time.

3004-501 Cannot su to "root" : Account is not accessible.

Im doing something wrong.

All I want to do. Its that root login canīt no be establish (telnet o ssh9. that you need to have a user first and then su to root and you got root. but I miss something. because I login with my user and when I try to su - to root I got
the message above.


Thanks for your tips
Login or Register to Ask a Question

Previous Thread | Next Thread

10 More Discussions You Might Find Interesting

1. UNIX for Dummies Questions & Answers

/etc/hosts.deny

Hi there, For /etc/hosts.deny was it used to deny access from the internet? (2 Replies)
Discussion started by: alvinoo
2 Replies

2. Red Hat

Limit root user of SSH logins

Hi team, I tried to modify the /etc/security/limits.conf file to limit the root user for more one login. I added the line in limits.conf file like: @root hard maxlogins 1 I also tried to modify /etc/ssh/sshd_config to limit the root userlogin by adding this: ... (10 Replies)
Discussion started by: leo_ultra_leo
10 Replies

3. AIX

Deny rsh,tn,or rlogin

Is there a way to deny access to a specific remote login option. example: usera--deny telnet access but keep rsh and rlogin userb--keeps telnet, rsh, and rlogin I'm basically trying to contol the access per services instead of changing the LOGIN REMOTELY(rsh,tn,rlogin) option to yes or no. (12 Replies)
Discussion started by: leemalloy
12 Replies

4. Solaris

Migration of system having UFS root FS with zones root to ZFS root FS

Hi All After downloading ZFS documentation from oracle site, I am able to successfully migrate UFS root FS without zones to ZFS root FS. But in case of UFS root file system with zones , I am successfully able to migrate global zone to zfs root file system but zone are still in UFS root file... (2 Replies)
Discussion started by: sb200
2 Replies

5. Solaris

Deny root remote login help

I'm attempting to deny a user's ability to login as root through any remote means - ie telnet or ssh. I've read most of the threads that I can find on this site and I've looked at BigAdmin on Sun's site. I have done what has been suggested here and on BigAdmin which is to make sure that the line... (5 Replies)
Discussion started by: gonzotonka
5 Replies

6. AIX

Deny root rlogin

Hi, I have to forbid root-logins on all my servers, expect from two machines, these 2 machines login with root without a password it was quite easy with ssh, but I have a problem regarding rsh/rlogin, an there are a lot of rsh jobs, so it would take a lot of time to change all this... (4 Replies)
Discussion started by: funksen
4 Replies

7. UNIX for Dummies Questions & Answers

ftp allow/deny list

OK, let see, i have a Tru64 Unix and need to know how the list of ftp users works and in /etc/ftpusers we have the unauthorized users but when we create a new user i want this users put automatic for deny access ..... where i set when creation of users action put automatic the user in that file?... (1 Reply)
Discussion started by: wbendek
1 Replies

8. UNIX for Dummies Questions & Answers

Run non-root script as root with non-root environment

All, I want to run a non-root script as the root user with non-root environment variables with crontab. The non-root user would have environment variables for database access such as Oracle or Sybase. The root user does not have the Oracle or Sybase enviroment variables. I thought you could do... (2 Replies)
Discussion started by: bubba112557
2 Replies

9. UNIX for Dummies Questions & Answers

Telnet deny

Hi all I'm using an AIX 5 machine. I'm trying to telnet from this machine to another Aix machine. When I use the "root" user - Everything works. I can telnet successfully the other machine When I use another user but root - I can't telnet the machine: noah@logist:/home/noah>telnet aixtst... (2 Replies)
Discussion started by: sunbird
2 Replies

10. UNIX for Dummies Questions & Answers

deny ssh from root - how to?

using redhat 7.2 Is it possible to not allow root to ssh into the server remotely, but allow the account that ssh'd in to the box to su to root? This way there is the added security of a hacker needing two passwords to hack your computer, a username/password for a regular account and also the... (3 Replies)
Discussion started by: theDirtiest
3 Replies
Login or Register to Ask a Question