DragonFly BSD
DragonFly users List (threaded) for 2006-08
[Date Prev][Date Next]  [Thread Prev][Thread Next]  [Date Index][Thread Index]

Re: Not sure how to do this tricky install...


From: Garance A Drosihn <drosih@xxxxxxx>
Date: Sat, 19 Aug 2006 17:17:25 -0400

At 9:31 AM -0700 8/18/06, Matthew Dillon wrote:

In fact, it is my thinking that we should adjust the default sshd_config to set the PermitRootLogin field to 'without-password' by default, since it won't do anything unless the SSH keys are also installed in root's authorized_keys file.

Sounds like a good idea. The option should have been called something else though. One of my co-workers saw

PermitRootLogin without-password

in some of the config files I set up, and nearly had a
panic-attack!  Some phrase more like "only-by-keys".  Or
at least include a comment in the sshd_config file which
makes that clear to admins who aren't used to seeing that
option.

--
Garance Alistair Drosehn            =   gad@xxxxxxxxxxxxxxxxxxxx
Senior Systems Programmer           or  gad@xxxxxxxxxxx
Rensselaer Polytechnic Institute    or  drosih@xxxxxxx



[Date Prev][Date Next]  [Thread Prev][Thread Next]  [Date Index][Thread Index]