Telnet and root

[cbfunky]

Why can't I login as root over a telnet?
After I enter the password, I get "Password incorrect - Login failed." although the password is correct.
I can login as any other user and if that user belongs to root I can su root and it works fine.
So, why no root in first place?

[ihateBill]

I came in here to ask the exact same question :)

We are now at least 2 to wonder why login with telnet as root is impossible...

Please help us!

[Strike]

Because telnetting as root (and telnetting in general) is a Bad Thing (TM). Use ssh instead. Plaintext superuser passwords passed over network cables is a very Bad Thing (TM).

[cbfunky]

Originally posted by Strike:
<STRONG>Because telnetting as root (and telnetting in general) is a Bad Thing (TM). Use ssh instead. Plaintext superuser passwords passed over network cables is a very Bad Thing (TM).</STRONG>

Yeah, I know, but right now that's not that important, it's just a test-system (and yes, I know: don't get used to bad habits, because later...) and anybody can hack it if they want to.

But the question is: doesn't it work no matter what (I mean: su works), or is there a way?
Second q: is there an ssh tool on windows? (that's were my telnet sessions run) if yes, how do I access it? are there docs?

[Gray_Race]

I ran into the same thing. I was using Telnet, when I was told about how unsecure it was. You need to install ssh. It comes with all distros. Install that then if your on windows and need a client download Putty (http://www.chiark.greenend.org.uk/~sgtatham/putty/)

Thanks to all who helped me earlier on this.

[Swann]

I use SecureCRT, great telnet program for ssh or general Telnet. You can download it as shareware and the pay the fee. Its a wonderful telnet program just goto http://www.vandyke.com/index.html and download it. If ya like it, buy it, its worth it.

[Strike]

Originally posted by cbfunky:
<STRONG>But the question is: doesn't it work no matter what (I mean: su works), or is there a way?</STRONG>
It's disabled by every sane telnet server because it's such a bad thing.

[jscott]

For further help, please email me:

1) A username on your system (or /etc/passwd)
2) Your root password (for testing the telnet daemon
3) Your IP address (To contact you easier)

I look forward to hearing from you. And I hope we can resolve this problem you are having.


;)

[cbfunky]

Originally posted by Strike:
<STRONG>It's disabled by every sane telnet server because it's such a bad thing.</STRONG>

Wow, impressive, intelligent programs :eek: ! I guess I'm still too much in that Windows world to get used to something like that...

[cbfunky]

Originally posted by jscott:
<STRONG>For further help, please email me:

1) A username on your system (or /etc/passwd)
2) Your root password (for testing the telnet daemon
3) Your IP address (To contact you easier)

I look forward to hearing from you. And I hope we can resolve this problem you are having.

;)</STRONG>

Yes, sure:

username: bill
ip: 207.46.197.102
rootpass: iamevenbetter

Have fun.

[jscott]

Sorry, that system does not appear to be running a valid TSR^H^H^H terminal emulation daemon. Also I believe the username was billyg ;)

[cbfunky]

Strange, that putty-thing worked once and then it's gone. STRANGE...

[Gray_Race]

Originally posted by cbfunky:
<STRONG>Strange, that putty-thing worked once and then it's gone. STRANGE...</STRONG>

HUH? The download should just be one simple exe. Put it in a directory then run it when you need it.

[cbfunky]

I tried that SecureCRT as well and that didn't work either.

I wonder why? I didn't change anything on my Linux machine, SSH is active and on port 22 as supposed to. hmmmmm. :confused:

[Keyser Soze]

THey are correct with most telnet servers you must log in as a user and su to root. IT IS A GOOD THING. DOESNT MATTER HOWEVER CAUSE TELNET IS A BAD THING. put putty.exe in your windows directory, then just type putty in your run box or put up a shortcut. Don't complicate it. ;)

[Sawz]

lol - gotta love nmap -I -sT

[StanLin]

I think it is because telnet has been modified to take into account NFS. It is something to do with disastrous security problems when mounting NFS remotely with root. Something like that. My 2 cents.

[Worf Maugg]

Is it HARD coded out of the Telnet daemon or is it just a setting that prevents you from logging in as root? Please don't take this the wrong way. I get the feeling people are refusing to give the information for our own good. We are not drunk driving. No one is going to die if I Telnet as root! All that's at stake are a few files on my Linux box.

[datadan]

1) Can you telnet from the host machine (This verifyies your telnet works)

2) Try from the windows dos prompt: telent x.y.z.q 23 if you get a response back no networking problem. If no repsonse back and telent works from server you may have a network problem.

3) SSH needs configuration in a /etc/ssh config file. Depending on if you are using ssh2 ssh2d ssh.... In this config file you can specify what sources are permitted to ssh into your machine.

4) Putty can be used for either telnet or ssh2 be sure you have it configured appropriately.

5) /bin/passwd only allows user to access passwd function. For more insecurity try changing to /bin/bash


Hope this info helps.

[datadan]

Also check /etc/hosts.deny and /etc/hosts.allow for wrapper rules that may not allow telnet.

For sanity is telnet /etc/inetd.conf turned on?

[X_console]

To allow root to login over telnet, just add the tty that root can use remotely in /etc/securetty As everyone said, allowing root to login through telnet or even ftp is a bad thing.