home *** CD-ROM | disk | FTP | other *** search
- Newsgroups: fj.mail-lists.apollo
- Path: sparky!uunet!stanford.edu!sun-barr!sh.wide!wnoc-tyo-news!etl.go.jp!daemon
- From: utcsri!helios.physics.utoronto.ca!alchemy.chem.utoronto.ca!system@uunet.uu.net (System Admin (Mike Peterson))
- Subject: Re: Logging in after install
- Message-ID: <1993Jan23.025909.22430@etl.go.jp>
- Sender: apollo-request@engin.umich.edu
- Organization: University of Toronto Chemistry Department
- References: <1jo9tgINNqqe@urmel.informatik.rwth-aachen.de>
- Distribution: fj
- Date: Fri, 22 Jan 1993 15:55:28 GMT
- Return-Path: <apollo-list-errors@srvr1.engin.umich.edu>
- Approved: kato@etl.go.jp
- Lines: 31
-
- In article <1jo9tgINNqqe@urmel.informatik.rwth-aachen.de> kuku@acds.physik.rwth-aachen.de writes:
- >How can I login as root or privileged user at this point? user -apollo- does
- >not give me su access.
-
- But you have access to /install/tools where there is a version of rbak
- called rbak_sr10 that is setuid root and will restore things like your
- registry (and will restore setuid root programs as setuid root for
- any user which is a MAJOR security hole - this program should either
- be deleted or the file/directory permissions changed so only root can
- get in there to prevent access after install has completed).
-
- >I saved the previous sys and etc directory of my node, hoping to be able to
- >re-establish the registry from that. Where is the registry located and
- >how can I re-activate it?
-
- It is /sys/registry and subdirectories; I assume this was the master
- node (or only node) since otherwise your network registry should be
- available once you get your networking set up properly. I hope you
- had your registry in "maintenance" mode when you backed it up, using
- 'rgy_admin'. One thing I do is force the local registry on each system
- to be updated every night so you can always login to a node whose
- network adaptor has failed - the local registry times out the accounts
- after 21 (?) days, so if you haven't logged in for a while, you won't be
- able to do so when you really need to (I do a '/etc/edrgy -synch',
- after expanding the local registry to hold enough accounts). This won't
- help when you invol, but it also gives you a complete copy of the real
- registry in the local registry.
- --
- core error - bus dumped -*- Mike Peterson, SysAdmin, U/Toronto Chemistry
- ******* As usual, I speak only for me, myself and I; nobody else *******
- E-mail: system@alchemy.chem.utoronto.ca Tel: (416)978-7094 Fax: (416)978-8775
-