Tag Info

New answers tagged

0

Sudosh may be a better solution. It logs sessions as needed and gives you "VCR" capabilities allowing you to replay sessions, its also available in most major distribution package repositories.


0

If you log in as root by using an ssh key, then you don't need the password. I have multiple servers on which I have changed the root password to be a random string of characters which is not recorded anywhere. Keys that are already authenticated through ~root/.ssh/authorized_keys will keep working after the root password has been changed. And if you always ...


0

Not many aside from choosing a weak password. If your system encrypts users home directories it is possible you could be in for a bad time if you then forget the new password. Standard practice is to not give root access to services like ssh, and instead have users sudo for privilege, this means you can track who logged in with the escalated privileges.


2

I've had similar problems in the past. My solution was to tunnel the MySQL connect through a SSH tunnel. It's quick & dirty but effective. Firstly, MySQL is bound to 127.0.0.1 using the my.cnf & bind-address = 127.0.0.1 This means MySQL is no longer available in the net. It won't answer any more queries unless they come from the local host. ...


-1

GRANT ALL ON . to root@'%' IDENTIFIED BY 'your-root-password'; It's a bit ugly though to give full access just with a password. I would suggest you use SSL keys for root logins, if you really need full remote access.


0

If you can't afford to risk it, then consider restoring your server from a backup, or if it's a virtual machine make a clone of it, and test resetting the password.


2

I won't say there are no implications on your system, as I have no idea what strange things your might have done, but I've never had any on mine. After all, it's just a password. Of course, it might be easy to create systems where the root password is stored somewhere for some purpose, but I would consider this bad design to begin with. And you are ...



Top 50 recent answers are included