able to login as root via ssh :-(

Les Mikesell lesmikesell at gmail.com
Tue Aug 8 19:18:55 UTC 2006


On Tue, 2006-08-08 at 14:45 -0400, Robert Locke wrote:
> > [snip]
> > > In order for a remote system to be in a state that remote access is even
> > > possible, there must be an OS already running. In order to install the
> > > first OS, physical access to the box must be required. It has to be
> > > physically connected etc. At the very least the power has to be turned
> > > on.. it might then proceed to do a network install...
> > >
> > > At that first install time is when a second user id should be created....
> > 
> > Non-root users are creating doing firstboot, not during the install.  If
> > you aren't there to go through the firstboot process, you can't create any
> > users other than via root.
> > 
> > I don't recall off the top of my head what kickstart lets you do with
> > respect to user creation.  It is conceivable that using kickstart to do a
> > PXE install will leave a headless machine with no way to access it except
> > via a root ssh session.
> 
> Well, kickstart and/or the interactive install could tie you in to
> various network directories like NIS or something LDAP based to give you
> non-root users...
> 
> But, of course, kickstart could add a user in a myriad of ways to the
> local passwd/shadow/group files during the %post section like:
> useradd -p encryptedpassword username

I'm not quite sure I see the point of this unless it is a
checkbox item in someones theoretical 'best practices' list.
How much of an install can you do as someone other than root?

-- 
 Les Mikesell
   lesmikesell at gmail.com




More information about the fedora-list mailing list