[OpenIndiana-discuss] ssh root login

Gregory S. Youngblood gregory at youngblood.me
Sun Jan 13 01:37:51 UTC 2013


Don't forget by default root is not a regular user account. Or at least it didn't used to be. You may need to issue the command to make root a full account before you can ssh to the root account.

Also, depending on what you're doing, you might consider ssh to a regular user and then escalate via sudo or pfexex instead of ssh to the root user directly.

Greg


--
Sent from my Jelly Bean Galaxy Nexus

Bob Friesenhahn <bfriesen at simple.dallas.tx.us> wrote:

>On Sun, 13 Jan 2013, Serge Fonville wrote:
>
>> It took me 2 minutes to set it up, succesfully
>>
>> The steps I took:
>>
>>> create key using ssh-keygen
>>> edit sshd_config and set PermitRootLogin to yes
>>> restarted sshd
>>> added the public key to authorized_keys
>>> specified the private key in the connection
>>
>> I tried with and without and empty root password
>>
>> What did you do different?
>
>As far as I know, that is what I did.
>
>Various other people have experienced similar Solaris related issues. 
>These postings suggest editing /etc/pam.conf.  Neither edit worked for 
>me:
>
>http://snltd.co.uk/snippets/index.php?c=v&sn=ssh_as_root.php&PHPSESSID=25648260eca8ea5afc1e120278b2b1f6
>
>http://www.semicomplete.com/blog/geekery/solaris-10-sshd-publickey-solution.html
>
>If it makes any difference, I am using OpenIndiana oi_151a7 on the 
>server host.  Ssh on the server host identifies itself as
>
>Sun_SSH_1.5, SSH protocols 1.5/2.0, OpenSSL 0x0090818f
>
>And the ssh client (Solaris 10) is
>
>Sun_SSH_1.1.5, SSH protocols 1.5/2.0, OpenSSL 0x0090704f
>
>I am only using files+DNS for configuration.  No LDAP, NIS, or 
>anything fancy like that.
>
>Bob
>-- 
>Bob Friesenhahn
>bfriesen at simple.dallas.tx.us, http://www.simplesystems.org/users/bfriesen/
>GraphicsMagick Maintainer,    http://www.GraphicsMagick.org/
>
>_______________________________________________
>OpenIndiana-discuss mailing list
>OpenIndiana-discuss at openindiana.org
>http://openindiana.org/mailman/listinfo/openindiana-discuss


More information about the OpenIndiana-discuss mailing list