SUMMARY: Disable SSH direct root login...

From: Harihar Krishnan (harik_at_bma.gov.bh)
Date: 03/22/04

  • Next message: Javier Fdez. Landa: "Tru64 5.1 & Informix SE 7.25 user auth problem" 
    Date: Mon, 22 Mar 2004 08:14:28 +0300
To: 'Tru64 User Group' <tru64-unix-managers@ornl.gov>

    Thanks to responses from Kris Chandrasekhar, Martin Adolfsson and few
    others, the solution was straightforward as follows:
    1. In "/etc/ssh2/sshd2_config", unremark the "PermitRootLogin" line and
    change its value to "no.
    2. Reset the sshd daemon by executing "/sbin/init.d/sshd reset".

    ----------------------------------------------------------------------------
    ----------------
    Original message:

    On removing the "ptys" line from /etc/securettys, I could not login directly
    as root when using the Windows telnet utility. However, after implementing
    SSH on the hosts, the direct root login works. How do I disable it for the
    SSH clients?
    ----------------------------------------------------------------------------
    ----------------

    Harihar K
            

    ===========================================================================
    DISCLAIMER:
    “This communication is intended solely for the named recipient and others
    authorized to receive it. It may contain confidential or legally privileged
    information. If you are not the intended recipient, please notify us
    immediately, and note that any disclosure, copying, distribution or action
    you may take in reliance on this communication is strictly prohibited and
    may be unlawful. Unless indicated otherwise, this communication is not
    intended nor should it be taken to create any legal relations, contractual
    or otherwise. Bahrain Monetary Agency(BMA) is neither liable for the proper
    and complete transmission of the communication, nor for any delay in its
    receipt. Whilst BMA undertakes all reasonable efforts to screen outgoing
    e-mails for viruses, it cannot be held liable for any viruses transmitted by
    this e-mail.”
    ===========================================================================

  • Next message: Javier Fdez. Landa: "Tru64 5.1 & Informix SE 7.25 user auth problem"

    Relevant Pages

    • Disable SSH direct root login...
      ... SSH on the hosts, the direct root login works. ... “This communication is intended solely for the named recipient and others ... e-mails for viruses, it cannot be held liable for any viruses transmitted by ...
      (Tru64-UNIX-Managers)
    • Re: So much for the bullshit wingnut AGW email "scandal"
      ... LONDON - E-mails stolen from climate scientists show they stonewalled ... Associated Press Science Writer ... The information contained in this communication is intended ...
      (rec.sport.football.college)
    • User Authentication System
      ... All INCOMING as well as OUTGOING e-mails are automatically monitored. ... Access to this communication by anyone other than the addressee is unauthorised. ... Alliance & Leicester plc is a member of the Legal & General Marketing Group, which is regulated by the FSA. ...
      (Security-Basics)
    • Re: {OT} follow the money trail
      ... "The White House hired a private communications company based in ... Minnesota to distribute mass e-mails, helping to shed light on how some ... e-mail service provides a fully-automated on-demand public communication ... It is still unknown how much taxpayer money the White House provides to ...
      (alt.autos.toyota)
    • Creating Xen guests in FC6
      ... I'm trying to set up Xen using FC6 as dom0, ... I've tried using both file and physical devices as root, ... This communication is intended for the use of the recipient to whom it ...
      (Fedora)