[OpenIndiana-discuss] ssh root login

[Ray Butler]

rolemod -K type=normal root

I set PermitRootLogin without-password and it works without issue.



On Sat, Jan 12, 2013 at 8:37 PM, Gregory S. Youngblood <
gregory at youngblood.me> wrote:

> Don't forget by default root is not a regular user account. Or at least it
> didn't used to be. You may need to issue the command to make root a full
> account before you can ssh to the root account.
>
> Also, depending on what you're doing, you might consider ssh to a regular
> user and then escalate via sudo or pfexex instead of ssh to the root user
> directly.
>
> Greg
>
>
> --
> Sent from my Jelly Bean Galaxy Nexus
>
> Bob Friesenhahn <bfriesen at simple.dallas.tx.us> wrote:
>
> >On Sun, 13 Jan 2013, Serge Fonville wrote:
> >
> >> It took me 2 minutes to set it up, succesfully
> >>
> >> The steps I took:
> >>
> >>> create key using ssh-keygen
> >>> edit sshd_config and set PermitRootLogin to yes
> >>> restarted sshd
> >>> added the public key to authorized_keys
> >>> specified the private key in the connection
> >>
> >> I tried with and without and empty root password
> >>
> >> What did you do different?
> >
> >As far as I know, that is what I did.
> >
> >Various other people have experienced similar Solaris related issues.
> >These postings suggest editing /etc/pam.conf.  Neither edit worked for
> >me:
> >
> >
> http://snltd.co.uk/snippets/index.php?c=v&sn=ssh_as_root.php&PHPSESSID=25648260eca8ea5afc1e120278b2b1f6
> >
> >
> http://www.semicomplete.com/blog/geekery/solaris-10-sshd-publickey-solution.html
> >
> >If it makes any difference, I am using OpenIndiana oi_151a7 on the
> >server host.  Ssh on the server host identifies itself as
> >
> >Sun_SSH_1.5, SSH protocols 1.5/2.0, OpenSSL 0x0090818f
> >
> >And the ssh client (Solaris 10) is
> >
> >Sun_SSH_1.1.5, SSH protocols 1.5/2.0, OpenSSL 0x0090704f
> >
> >I am only using files+DNS for configuration.  No LDAP, NIS, or
> >anything fancy like that.
> >
> >Bob
> >--
> >Bob Friesenhahn
> >bfriesen at simple.dallas.tx.us,
> http://www.simplesystems.org/users/bfriesen/
> >GraphicsMagick Maintainer,    http://www.GraphicsMagick.org/
> >
> >_______________________________________________
> >OpenIndiana-discuss mailing list
> >OpenIndiana-discuss at openindiana.org
> >http://openindiana.org/mailman/listinfo/openindiana-discuss
> _______________________________________________
> OpenIndiana-discuss mailing list
> OpenIndiana-discuss at openindiana.org
> http://openindiana.org/mailman/listinfo/openindiana-discuss
>



-- 
*
*