Re: root Login

[Joerg Friedrich <Joerg.Dieter.Friedrich@uni-konstanz.de>]

Klaus Schuehler schrieb am Freitag, 25. Februar 2005 um 10:28:51 +0100:
> login von root zu verhindern. Es soll nicht Möglich sein das sich
> root per ssh direkt einloggen kann. Nur als User und bei Bedarf mit
> 
> Wo muss ich drehen das der Rechner das schnallt.

man sshd_config:
    PermitRootLogin
             Specifies whether root can login using ssh(1).  The argument must
             be ``yes'', ``without-password'', ``forced-commands-only'' or
             ``no''.  The default is ``yes''.

             If this option is set to ``without-password'' password authenti-
             cation is disabled for root.  Note that other authentication
             methods (e.g., keyboard-interactive/PAM) may still allow root to
             login using a password.

             If this option is set to ``forced-commands-only'' root login with
             public key authentication will be allowed, but only if the
             command option has been specified (which may be useful for taking
             remote backups even if root login is normally not allowed).  All
             other authentication methods are disabled for root.

             If this option is set to ``no'' root is not allowed to login.



-- 
Jörg Friedrich

There are only 10 types of people:
Those who understand binary and those who don't.