copyleft by http://www.idevelopment.info/data/Unix/Linux/LINUX_TelnetFTPAsRoot.shtml
Configuring Telnet/FTP to login as root (Linux)
by Jeff Hunter, Sr. Database Administrator
Contents
1. Red Hat Enterprise Linux: RHEL3 / RHEL4 2. Red Hat (Fedora Core 1 / Core 2) 3. Red Hat (Release 7.x - 8.x)
Red Hat Enterprise Linux: RHEL3 / RHEL4
Enabling Telnet and FTP Services
Linux is configured to run the Telnet and FTP server, but by default, these services are not enabled. To enable the telnet service, login to the server as the root user account and run the following commands:
# chkconfig telnet on # service xinetd reload Reloading configuration: [ OK ]
Starting with the Red Hat Enterprise Linux 3.0 release (and in CentOS Enterprise Linux), the FTP server (wu-ftpd) is no longer available with xinetd. It has been replaced with vsftp and can be started from /etc/init.d/vsftpd as in the following:
# /etc/init.d/vsftpd start Starting vsftpd for vsftpd: [ OK ]
If you want the vsftpd service to start and stop when recycling (rebooting) the machine, you can create the following symbolic links:
Now before getting into the details of how to configure Red Hat Linux for root logins, keep in mind that this is VERY BAD security. Make sure that you NEVER configure your production servers for this type of login.
Configure Telnet for root logins
Simply edit the file /etc/securetty and add the following to the end of the file:
This will allow up to 10 telnet sessions to the server as root.
Configure FTP for root logins
Edit the files /etc/vsftpd.ftpusers and /etc/vsftpd.user_list and remove the 'root' line from each file.
Red Hat (Fedora Core 1 / Core 2)
Enabling Telnet and FTP Services
Linux is configured to run the Telnet and FTP server, but by default, these services are not enabled. To enable the telnet these service, login to the server as the root userid and edit the files:
* /etc/xinetd.d/telnet
In this file, find the line for disable and change it from the value "yes" to "no".
After changing the above value(s), you will need to restart the xinetd deamon. As the root userid, type the following command:
% /etc/init.d/xinetd reload
Starting with the Fedora Core 1 release, the FTP server (wu-ftpd) is no longer available with xinetd. It has been replaced with vsftp and can be started from /etc/init.d/vsftpd as in the following:
# /etc/init.d/vsftpd start
If you want the vsftpd service to start and stop when recycling the machine, you can create the following symbolic links:
Now before getting into the details of how to configure Red Hat Linux for root logins, keep in mind that this is VERY BAD security. Make sure that you NEVER configure your production servers for this type of login.
Configure Telnet for root logins
Simply edit the file /etc/securetty and add the following to the end of the file:
This will allow up to 10 telnet sessions to the server as root.
Configure FTP for root logins
Edit the files /etc/vsftpd.ftpusers and /etc/vsftpd.user_list and remove the 'root' line from each file.
Red Hat (Release 7.x - 8.x)
Enabling Telnet and FTP Services
Linux is configured to run the Telnet and FTP server, but by default, these services are not enabled. To enable these services, login to the server as the root userid and edit the files:
* /etc/xinetd.d/telnet * /etc/xinetd.d/wu-ftpd
In both files, find the line for disable and change it from the value "yes" to "no".
After changing the above values, you will need to restart the xinetd deamon. As the root userid, type the following command:
% /etc/init.d/xinetd reload
Allowing Root Logins to Telnet and FTP Services
Now before getting into the details of how to configure Red Hat Linux for root logins, keep in mind that this is VERY BAD security. Make sure that you NEVER configure your production servers for this type of login.
Configure Telnet for root logins
Simply edit the file /etc/securetty and add the following to the end of the file:
RHBA-2007:1012 - Bug Fix Advisory 정보 패키지 영향을 받은 시스템
개요 telnet-server bug fix update
발행된 날짜: 07. 11. 15 업데이트된 날짜: 07. 11. 15
주제 Updated telnet-server packages that fixe a bug are now available.
설명 Telnet is a popular protocol for logging in to remote systems over the Internet. The telnet-server package includes a telnet daemon that supports remote logins into the host machine. The telnet daemon is disabled by default.
The telnet daemon refused connections when the reverse records for the host you were connecting to did not exist, for example, when configured nameservers were unavailable, and the host you were connecting to was not in "/etc/hosts". Telnet sessions would terminate with a "Temporary failure in name resolution: Illegal seek" error.
Users of the telnet-server packages are advised to upgrade to these updated packages, which resolve this issue.
해결책 Before applying this update, make sure that all previously-released errata relevant to your system have been applied.
This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/FAQ_58_10188
영향을 받은 채널 Red Hat Enterprise Linux (v. 5 64-bit IBM System z) Red Hat Enterprise Linux (v. 5 for 32-bit x86) Red Hat Enterprise Linux (v. 5 for 64-bit IBM POWER) Red Hat Enterprise Linux (v. 5 for 64-bit Itanium) Red Hat Enterprise Linux (v. 5 for 64-bit x86_64) Red Hat Enterprise Linux Desktop (v. 5 for 32-bit x86) Red Hat Enterprise Linux Desktop (v. 5 for 64-bit x86_64)
(0) 
(0)
,
dns