RE: Remote login

["Mark W. Knecht" <mknecht controlnet com>]

Vanessa,
   To amplify a bit on Rick's excellent advice, if you or your developers
need to log in from Windows workstations, there are ssh clients for the
Windows environments also. I use one called SecureCRT. It works well with
both RH and SuSE Linux machines as the remote device. I log in as my user
name (mknecht) using ssh, then do a 'su -' in the resulting terminal to
manage my email server. I am a total Linux putz, and this works very well
for me.

   As I understand the system, it's a pretty secure and safe way to work.

   SecureCRT is too expensive (IMO) so maybe look for competing solutions.

Mark

-----Original Message-----
From: redhat-install-list-admin redhat com
[mailto:redhat-install-list-admin redhat com]On Behalf Of Rick Stevens
Sent: Friday, May 03, 2002 9:40 AM
To: redhat-install-list redhat com
Subject: Re: Remote login


corbin, vanessa wrote:
> Question 1
> I have X server running.  I use KDE at console.  I want to know if it is
> possible access KDE desktop environment when remotely accessing system.
If
> it is possible, how do I set it up???

Vanessa,

First, don't use telnet if you can avoid it.  Use ssh (it's  part of the
standard RedHat installation).  telnet is totally unencrypted so anyone
looking at the data stream will be able to see passwords and such in
cleartext.  ssh encrypts EVERYTHING.  You will need an ssh client to
log in, but it's part of the ssh package.

ssh, as distributed by RedHat,  DOES allow root logins remotely.  To
disable that feature, you must edit the "/etc/ssh/sshd_config" file,
change the line "PermitRootLogin yes" to "PermitRootLogin no" and
restart sshd.

ssh will also allow you to use a GUI.  It provides a tunneling mechanism
for Xwindows.  From the remote end you log into the host via ssh.  If
you run your X application on the host, the GUI will show up at the
remote end.  I think that's what you want.  Keep in mind that the GUI
won't be as fast remotely due to the connection speed between the
machines AND the encryption SSH is doing.

> Question 2
> I will have developers just su to root.

Good.  Remember, "su" grants root privileges, but not root's
_environment_ (path, home directory, etc.)  If you want to become root
(just as if you had logged in as root), then use "su -".

Again, I can't stress strongly enough--DISABLE telnet and use SSH.
Also stay away from anonymous FTP unless you use the ProFTP package.

> -----Original Message-----
> From: Bill Andersen [mailto:bill mwdental com]
> Sent: Friday, May 03, 2002 11:16 AM
> To: redhat-install-list redhat com
> Subject: RE: Remote login
>
>
> Vanessa Corbin wrote:
>
>>I am new to Linux.  I have just installed Red Hat 7.2.  I want to know:
>>
>>1) Is gui interface available when accessing box remotely?
>>2) Can "root" id be used to telnet into box?
>>
>>Currently, I cannot telnet using root and I do not get gui interface.  Are
>>these problems or features??
>>
>
> Vanessa,
>
>   As a general rule of thumb, you shouldn't really log in as "root"
>   for everyday usage.  Especially if you are not familier with the OS.
>   Although most "experienced" system admins DO log in as root as a norm,
>   most will tell you the don't :)  (OK, yes I'm included)
>
>   However, the BEST way to do your administration is to log in under
>   your normal user account and then issue the command "su".  You will
>   then be asked for the root password.  Once you give a good password,
>   you become the "Super User" (aka root)
>
>   So, in answer to your question #2 - As telnet is not a secure method
>   of accessing your machine, MOST unix system don't allow you to telnet
>   in as root BY DEFAULT.  You CAN configure telnet to allow access via
>   root, but I wouldn't suggest doing so.
>
>   For question #1 - You can get a GUI using an Xwindows Server on your
>   local machine.  However, I have no use for it and really have never
>   done so.  Other on the list might point you to a good X server -
assuming
>   you are working on a PC from the remote machine.
>
> Bill
>
>
>
> _______________________________________________
> Redhat-install-list mailing list
> Redhat-install-list redhat com
> https://listman.redhat.com/mailman/listinfo/redhat-install-list
>
>
>
> _______________________________________________
> Redhat-install-list mailing list
> Redhat-install-list redhat com
> https://listman.redhat.com/mailman/listinfo/redhat-install-list
>



--
----------------------------------------------------------------------
- Rick Stevens, SSE, VitalStream, Inc.      rstevens vitalstream com -
- 949-743-2010 (Voice)                    http://www.vitalstream.com -
-                                                                    -
-     Veni, Vidi, VISA:  I came, I saw, I did a little shopping.     -
----------------------------------------------------------------------



_______________________________________________
Redhat-install-list mailing list
Redhat-install-list redhat com
https://listman.redhat.com/mailman/listinfo/redhat-install-list