Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

The default login for SSH on the droboshare is a user name of root with a password of giveit2me. With the command passwd the password can be changed. However I can't find anyway to change the default user name. Since any Unix based has a user named root this kinda bugs me as a minor security issue.

Does anyone know how to change the user name for droboshare SSH logins? The SSH program being used is a variant of dropbear if that is any help.

share|improve this question
add comment

1 Answer

up vote 0 down vote accepted

Be aware. Some NAS (qnap i know) use patched dropbear that allow only root user access from ssh. Test, you can create different user and has ssh access with it. If test ok. dropbear configured in init script. But each NAS may be is very specific.

share|improve this answer
    
Using adduser username and then passwd username allowed me to create a new user that could login via SSH. However the user root can still login. Is there any way to disable that? –  AmaDaden Apr 11 '10 at 3:11
    
On second thought since droboshare does not have any other way to login besides SSH disabling root access for SSH is a bad idea. –  AmaDaden Apr 11 '10 at 3:54
    
If different user can login over ssh. Can new user escalate priveleges to root by su or sudo ? If can is possible * foind init script where dropbear started and disable root login with -w option * disable root by setting shell to /bin/nologin ... and then using logging in with different user and make su -s or sudo for use root priveleges. –  mmv-ru Apr 11 '10 at 21:23
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.