From owner-freebsd-questions@FreeBSD.ORG Mon Mar 1 07:42:25 2004 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 0B11016A4CE for ; Mon, 1 Mar 2004 07:42:25 -0800 (PST) Received: from smtpo01.icare.priv (unknown [203.78.64.148]) by mx1.FreeBSD.org (Postfix) with ESMTP id EAEBB43D41 for ; Mon, 1 Mar 2004 07:42:23 -0800 (PST) (envelope-from satimis@icare.com.hk) Received: from smtpi02.icare.priv ([10.11.12.45]) by smtpo01.icare.priv with Microsoft SMTPSVC(5.0.2195.5329); Mon, 1 Mar 2004 23:42:20 +0800 Received: from 203.88.164.60 ([203.88.164.60]) by smtpi02.icare.priv with Microsoft SMTPSVC(5.0.2195.5329); Mon, 1 Mar 2004 23:42:20 +0800 From: Stephen Liu To: Nathan Kinkade Date: Tue, 2 Mar 2004 08:09:43 +0800 User-Agent: KMail/1.5.4 References: <200403020152.37627.satimis@icare.com.hk> <20040301143307.GC11958@nkinkade.bmp.ub> In-Reply-To: <20040301143307.GC11958@nkinkade.bmp.ub> MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit Content-Disposition: inline Message-Id: <200403020809.43752.satimis@icare.com.hk> X-OriginalArrivalTime: 01 Mar 2004 15:42:20.0245 (UTC) FILETIME=[C857B850:01C3FFA3] cc: freebsd-questions@freebsd.org Subject: Re: SSH Problem X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 01 Mar 2004 15:42:25 -0000 - snip - > > You say that this works as root, but your example seems to indicate > otherwise. By default, root logins via ssh is disabled in the sshd > config file, usually at /etc/ssh/sshd_config. If for some reason you > want to allow root logins via ssh then uncomment the following line and > change "no" to "yes" - then restart sshd: > > PermitRootLogin yes > > However, I think this would generally be frowned upon from a security > standpoint. Hi Nathan, Tks for your advice which works. This arrangement is only to facilitate Administor's job. He operates outside contact as 'user' from there if necessary he can login as root doing maintenance. B.R. Stephen