Date:  Fri, 24 Mar 2006 18:59:16 +0100
From:  Kristian Eklund <kristian.eklund (at mark) monostar.net>
Subject:  [coba-e:04354] Re: user root-admin
To:  coba-e (at mark) bluequartz.org
Message-Id:  <44243374.2070405 (at mark) monostar.net>
In-Reply-To:  <20060324171119.GH14285 (at mark) localhost.localdomain>
References:  <01E188343A33DE4E8B1A00D7980BC8799E64D8 (at mark) s2.combox.de> <E0A34F3E-470A-4EF1-9879-5EE326B1251B (at mark) alpha.or.jp> <20060324171119.GH14285 (at mark) localhost.localdomain>
X-Mail-Count: 04354

I see no real advantages using this root-admin account over normal su.
Why would anyone except admins be trusted with root-access? Sudo could
also be used.. If this root-admin account makes it this easy to hack a
default BQ server this must be changed.

/Kristian

PS wrote:
> When you install BQ, default password is admin. If you change admin or root
> password, root-admin password is not changed. So passwd is always admin, and
> this user has ssh access to server.
> 
> I let you imagine which passwd you try when you want to gain access to
> server...
> 
> regards
> PS
> 
> On Sat, Mar 25, 2006 at 01:22:40AM +0900, Hisao SHIBUYA wrote:
>> root-xxx user is the account to be root access for xxx user.
>> If you add "admin2" for admin user with root access, then you
>> can su to root-admin2 with root permission.
>>
>> The "admin" account is default account for BlueQuartz with root
>> access, and then handler makes "root-admin" account by default.
>>
>> But, we usually use root account for root access not use root-admin.
>> The "root-admin" account isn't needed for GUI, it is needed for
>> root access.
>>
>> Hisao
>>
>>
>> On 2006/03/25, at 0:56, Tobias Gablunsky wrote:
>>
>>> Does anybody know, what it is good for?
>>>
>>>
>>> tobias gablunsky
>>> systemtechnik internet
>>>
>>> CBXNET combox internet gmbh
>>> potsdamer strasse 96 | 10785 berlin
>>> tel: +49 (30) 5 900 6 900
>>> fax: +49 (30) 5 900 6 999
>>> www.cbxnet.de | support (at mark) cbxnet.de
>>>
>>>> -----Original Message-----
>>>> From: PS [mailto:ps (at mark) ovh.net]
>>>> Sent: Thursday, March 02, 2006 7:12 PM
>>>> To: coba-e (at mark) bluequartz.org
>>>> Subject: [coba-e:04231] user root-admin
>>>>
>>>> Is user root-admin very important in Bluequartz?
>>>>
>>>> If yes what does he do?
>>>>
>>>> Thanx for your answer.
>>>> Regards
>>>>
>>>> PS
>>>>
>>>>
>>>>
> 
>