Software for distribution of configuration files and changes
koitsu at FreeBSD.org
Tue Nov 20 16:20:53 PST 2007
On Wed, Nov 21, 2007 at 12:15:36AM +0100, Julian H. Stacey wrote:
> PermitRootLogin yes
This should really be "PermitRootLogin without-password". Yes, the
phrase "without-password" looks scary, but it isn't so much -- it allows
root login via passwordless SSH keys only, while simultaneously
continues disallowing root logins via keyboard/password authentication.
sshd_config(5) has details.
| Jeremy Chadwick jdc at parodius.com |
| Parodius Networking http://www.parodius.com/ |
| UNIX Systems Administrator Mountain View, CA, USA |
| Making life hard for others since 1977. PGP: 4BD6C0CB |
More information about the freebsd-stable