Subject: Re: Login stuff + netbsd bankrupt ??
To: None <marcsje@fulladsl.be>
From: Havard Eidnes <he@uninett.no>
List: netbsd-users
Date: 01/31/2006 21:17:15
> Unfortunately, with a hosts.allow
>
> ALL: ALL
>
> it still don't work ...
> localhost:~ marc$ telnet 192.168.1.3
> Trying 192.168.1.3...
> telnet: connect to address 192.168.1.3: Connection refused
> telnet: Unable to connect to remote host
> localhost:~ marc$ telnet 192.168.1.3
> Trying 192.168.1.3...
> Connected to 192.168.1.3.
> Escape character is '^]'.
>
> NetBSD/i386 (netbsdi386.fulladsl.be) (ttyp3)
>
> login: root
> Password:
> login: pam_acct_mgmt: authentication error
>
> The Pam thing is really interesting...

In the default setup, root cannot login across the network, in
particular not with telnet, because the tty it is coming in on is
not "secure" (ref. ttys(5)).  No, I am not suggesting you go and
edit that file.

First off, you would be well advised to use ssh instead of
telnet.

Second: two possible remedies:

1) Log in as a normal user.  telnet should allow you to do that.
   Of course you'll need to be on the console to log in as root
   to create that user.  (Next likely hurdle: a user must be in
   the "wheel" group to su to root.)

2) Use ssh, tweak /etc/ssh/sshd_config to "PermitRootLogin yes"
   (you take the responsibility on that one, OK?), restart sshd,
   and login as root using ssh.

I think your other remarks were adequatly addressed by someone
else.

Regards,

- H=E5vard