[indiana-discuss] 2008.11 root login question

Josh Simons Joshua.Simons at Sun.COM
Sat Nov 8 05:15:49 PST 2008


I have no issue with the default behavior and am aware of both what
RBAC stands for and what it does.

I do, however,  have an issue with the unclear error message and have  
filed
a bug on that. A good out of box experience is important for broad  
acceptance
of OpenSolaris since small things like this that can alienate a new  
user.


On Nov 8, 2008, at 2:18 AM, Anon Y Mous wrote:

> There is no need to spam the opensolaris defect list because of this  
> error message because Solaris is behaving the way it was designed  
> to. Root login is intentionally disabled because there is no longer  
> a "root user" anymore when you use an RBAC based system such as  
> Solaris 10, Trusted Solaris 8, or any other version of Solaris  
> after  Solrais 10.
>
> RBAC stands for "Role Based Access Control" and it was designed by  
> the military to increase security by no longer concentrating all of  
> the power in a single root user (which makes it easy for hackers to  
> compromise the system once they can escalate priveleges to get root  
> access). Basically, root login from the console or via ssh is  
> disabled by default because it is a security risk. And there is no  
> longer a "root" user. Instead root is a "role" assumed by other users.
>
> However, if you really want to, you can create a traditional root  
> user (like what you have in Linux or older Solaris like Solaris 9)  
> and enable logins by that user.
>
> This is the link for a good tutorial that explains how to to create  
> a root user and then log in as that root user to install the Azureus  
> bit torrent client:
>
> http://www.comp-sos.com/index.php/review/operating-systems/42-unix/80-install-azureus-open-solaris-200805
>
> Click on the small squares to enlarge the pictures and see the  
> screen shots.
> -- 
> This message posted from opensolaris.org
> _______________________________________________
> indiana-discuss mailing list
> indiana-discuss at opensolaris.org
> http://mail.opensolaris.org/mailman/listinfo/indiana-discuss




More information about the indiana-discuss mailing list