Remote os root or with root priv..

[BrainDead]

I am trying to make changes to this server that I am setting up from the win box. I cannot login remotely (telnet or ftp as root). I need to be able to make some of the changes remotely, and have to have root privledges to do so.

I don't have icq or aim, I probably need to set up for ICQ - which windoze client do you reccommend.

[Craig McPherson]

You should never allow remote root logins on any system.

Log in as a normal user, then use the "su" command to switch to a root shell.

It's possible to configure telnet or ftp or ssh to allow root logins, but I won't tell you how because you shouldn't do it. In fact, you shouldn't use ftp or telnet over the Internet at all: you really should be using SSH. You can do FTP over SSH, as well as the standard shell logins, and you have the added bonus of not having your root password flying across the Internet in plain text.

People more dedicated to security will tell you that you shouldn't even log in as root when you're sitting down at the machine itself -- you should still log in as a user and su to root.

[BrainDead]

OK, great! I've got PuTTY. I will SU to Root from now on (I may even understand why later!). I do remember reading someting to that effect but cannot remeber the reason yet.

Now, I will read up on SSH, I guess it is not running yet. Then I will figure out what I did to apache.

Hey, I have the server in question hooked up to my home network (peer-to-peer). So, if I make everything work here, and then move it to the Co-locate facility, I will just need to change the IP, domain, etc,. but everything else will keep working - right!? or am I way off and I will have to reconfigure everything when the machine is on the network and has a different IP, etc.?

I am kinda excited about finally getting my fingernails dirty in Linux. I have had an old Pentium 100 running the Linux firewall/gateway to my cable modem for well over 8 months now. It sits there and works and works and works. I'd go monkey with it more but I don't own enough monitors so I just let it do it's thing and have been happy except for the fact that it does need some monkeying with.

I want to upgrade my wife's computer and get a couple "cheap" linux boxes for the kids so they can learn what they need to learn to use Linux - they already love the "same" game.

[WilliamWallace]

heres the reason you shouldnt allow root logins....

if a cracker gets the root password they can login and mess you up...but if you dont allow root logins they have to get the password of another user, then login as root....so they would have to get two passwords instead of one...most crackers (kiddies) are too lazy to go to the extra trouble. if they get the root password and cannot login they will move to an easier target.

[Craig McPherson]

You shouldn't have any problems moving the server over. You'll have to update the network interface definition and the resolv.conf, but that's trivial.