Software for distribution of configuration files and changes

[Jeremy Chadwick]

On Wed, Nov 21, 2007 at 12:15:36AM +0100, Julian H. Stacey wrote:
> Add
> 	PermitRootLogin yes
> to
> 	/etc/ssh/sshd_config

This should really be "PermitRootLogin without-password".  Yes, the
phrase "without-password" looks scary, but it isn't so much -- it allows
root login via passwordless SSH keys only, while simultaneously
continues disallowing root logins via keyboard/password authentication.
sshd_config(5) has details.

-- 
| Jeremy Chadwick                                    jdc at parodius.com |
| Parodius Networking                           http://www.parodius.com/ |
| UNIX Systems Administrator                      Mountain View, CA, USA |
| Making life hard for others since 1977.                  PGP: 4BD6C0CB |