Re: How can I Modify Telnet Daemon?

["Anthony E. Greene" <agreene pobox com>]

At 17:05 2/27/2002 +0200, Ceyhun Kirmizitas wrote:
> I am using RedHat 7.1.
> My question is that How Can I modify telnet daemon so that
> at login screen if someone enters "abcde" as username, it will logon
> without password as root?

In the first place, telnetd is not enabled by default. You'll have to edit 
xinetd.conf to enable it.

Secondly, telnet is disabled by default because it is a very insecure 
service. Passwords and all commands are sent unencrtypted across 
potentially unsecure networks. It is not hard to setup a network sniffer to 
capture passwords from telnet logins.

If you really need to login as root remotely with no password, you should 
setup SSH using RSA authentication. You'll need to put root's key on the 
client machine, but this will work.

If you really insist on doing this using telnet, you can create a user and 
set their UID and GID to 0 (zero).  Delete the password field in 
/etc/shadow, and the user should be able to login without a password. After 
you do this, keep your Red Hat CD handy so you can reinstall the system 
after your box is cracked.

Tony
--
Anthony E. Greene <agreene pobox com>
PGP Key: 0x6C94239D
AOL/Yahoo Chat: TonyG05
Linux. the choice of a GNU generation. <http://www.linux.org/>