Enable root account in 12.10 using lightdm

[Frank616]

I know, I know. DON'T USE ROOT. So before we get into philosophy, I don't run the GUI as root. However....

I personally prefer (and think it is safer) to be behind TWO passwords when it comes to changing system settings on my machines. I use one password for my user accounts, but prefer that the admin/root password be something else. That way no one that does get into my user account will be able to SUDO their way any further.

Yes, I could take my user account out of the sudoers group. But then I can't do anything from that account either.

So, to enable a separate root password, I need to be able to specify rootpw, which was easy to do with kdm. This disables the user password in sudo. sudo will then only respond to the rootpw.

So, now I'm looking for a way to do this in lightdm.

I can enable a root login in lightdm, but this appears to log me in as root in the gui, something that I don't often do. I just want to make sudo take a password different from the user password for the account.

Frank.

[oshunluvr]

sudo -i
passwd
exit

should do it.

[oshunluvr]

To turn off the user passwd and use root:

In /etc/sudoers, add this line:

Defaults rootpw

to turn on the rootpw flag, making sudo ask for the root password.

[Frank616]

sudo -i
passwd
exit

should do it.

So, what did that do?

sudo -i just allows me to set my own password
passwd asks for a root password, which I can give it. I've done that before.
exit logs me out, of something.

Opening a console and typing sudo kate asks me for my USER password. My user password still works. I want to prevent that.

Frank.

[oshunluvr]

Try

passwd root

instead. Also, when you edit sudoers, use visudo command.

[Frank616]

Oshunluvr:

In /etc/sudoers, add this line:

Defaults rootpw

to turn on the rootpw flag, making sudo ask for the root password.

RIGHT! I had forgotten that I needed to edit the sudoers file. And I even had that in my notes from last time!

Got it.

Thanks.

[oshunluvr]

BTW, you should never do sudo kate. Do kdesudo kate instead.

[Frank616]

BTW, you should never do sudo kate. Do kdesudo kate instead.

Yes, thanks. I know that it messes up the ownership if you just use sudo. However, I needed something to add to sudo to see if it worked.

Frank.

[sithlord48]

Yes, thanks. I know that it messes up the ownership if you just use sudo. However, I needed something to add to sudo to see if it worked.

Frank.

sudo and kdesudo should use the same password set.

[Frank616]

sudo and kdesudo should use the same password set.

Agreed. I just did a quick and dirty to check it, that's all. You know, 'in the heat of the moment' and all that.

Frank.

[oshunluvr]

You've been around long enough that I figured you knew it. I just wanted to be sure, plus others might read the thread. Always worth bringing the sudo vs. kdesudo point up as often as possible to keep the noobs out of trouble

[Frank616]

You've been around long enough that I figured you knew it. I just wanted to be sure, plus others might read the thread. Always worth bringing the sudo vs. kdesudo point up as often as possible to keep the noobs out of trouble

That was what I understood too.

Thanks for the help. I'll get back to setting that machine up later this week, I hope. Seems I'm busier now that I'm retired than I was when working!

Frank.

[oshunluvr]

. Seems I'm busier now that I'm retired than I was when working!

Ditto!