OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: sshd PermitRootLogin problem

From: Aaron Nichols (adnicholsgmail.com)
Date: Tue Nov 02 2004 - 14:37:45 CST


On Tue, 02 Nov 2004 14:09:06 -0500, Brandon Mercer <nomercyeutonian.com> wrote:

> Duh, any time you set Permit Root Login to no it overrides the keys. If
> you don't want root to login, then you'd better try a user account with
> those keys.
> Brandon

Perhaps you should man sshd_config

     PermitRootLogin
             Specifies whether root can login using ssh(1). The argument must
             be ``yes'', ``without-password'', ``forced-commands-only'' or
             ``no''. The default is ``yes''.
...

His use of that option is perfectly valid HOWEVER - that option does
require that ssh be used with a command defined, eg. ssh <hostname>
<command> - simply using ssh <hostname> will not work. If you want to
be able to ssh <hostname> but want to disable password authentication
(while allowing public keys) you should use the "without-password"
option I believe.

Aaron