Date: Fri, 5 Oct 2001 16:53:51 -0400 From: Jamie Oulman <jamie@techsquare.com> To: Matt Dillon <dillon@earth.backplane.com> Cc: stable@freebsd.org Subject: Re: Why sshd:PermitRootLogin = no ? Message-ID: <20011005165350.A22343@techsquare.com> In-Reply-To: <200110052040.f95KeTw84982@earth.backplane.com>; from dillon@earth.backplane.com on Fri, Oct 05, 2001 at 01:40:29PM -0700 References: <5.1.0.14.0.20011005120304.009f8590@127.0.0.1> <200110052040.f95KeTw84982@earth.backplane.com>
next in thread | previous in thread | raw e-mail | index | archive | help
why? from what i can tell you want the default entry changed to accomodate your personal installation method? i dont see a problem with PermitRootLogin no at all. its standard. if you want to use keys for root then change it after the installation. again. maybe im missing the point. but i dont see what your average user is going to gain from making a change like this. jamie. On Fri, Oct 05, 2001 at 01:40:29PM -0700, Matt Dillon wrote: > Yes, exactly so. Though I don't think it would hurt to change > the default to: > > PermitRootLogin without-password > > Which means that root can only login using a pre-authenticated > method such as an SSH key pair (aka ~root/.ssh/authorized_keys), or > kerberos. Passworded logins are still disallowed. > > -Matt To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20011005165350.A22343>