From owner-freebsd-questions@FreeBSD.ORG  Mon Oct 22 15:01:13 2007
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 4B93916A469
	for <freebsd-questions@freebsd.org>;
	Mon, 22 Oct 2007 15:01:13 +0000 (UTC) (envelope-from jamesh@lanl.gov)
Received: from mailwasher.lanl.gov (mailwasher.lanl.gov [204.121.3.2])
	by mx1.freebsd.org (Postfix) with ESMTP id 14CD613C481
	for <freebsd-questions@freebsd.org>;
	Mon, 22 Oct 2007 15:01:12 +0000 (UTC) (envelope-from jamesh@lanl.gov)
Received: from mailrelay1.lanl.gov (mailrelay1.lanl.gov [128.165.4.101])
	by mailwasher.lanl.gov (8.13.8/8.13.8/(ccn-5)) with ESMTP id
	l9MF0vJK001398; Mon, 22 Oct 2007 09:00:58 -0600
Received: from oppie-mail.lanl.gov (oppie-mail.lanl.gov [128.165.4.123])
	by mailrelay1.lanl.gov (8.13.8/8.13.8/(ccn-5)) with ESMTP id
	l9MF0uxE008340; Mon, 22 Oct 2007 09:00:56 -0600
Received: from [128.165.86.10] (secretariat.lanl.gov [128.165.86.10])
	by oppie-mail.lanl.gov (Postfix) with ESMTP id 4D5721F8004;
	Mon, 22 Oct 2007 09:00:52 -0600 (MDT)
From: James <jamesh@lanl.gov>
To: "W. D." <WD@us-webmasters.com>
In-Reply-To: <20071022074758.5131513C4A5@mx1.freebsd.org>
References: <20071022074758.5131513C4A5@mx1.freebsd.org>
Organization: Los Alamos National Laboratories
Date: Mon, 22 Oct 2007 09:01:18 -0600
Message-Id: <1193065278.73574.42.camel@secretariat.lanl.gov>
Mime-Version: 1.0
X-Mailer: Evolution 2.10.3 FreeBSD GNOME Team Port 
X-CTN-5-MailScanner-Information: Please see
	http://network.lanl.gov/email/virus-scan.php
X-CTN-5-MailScanner: Found to be clean
X-CTN-5-MailScanner-From: jamesh@lanl.gov
X-Spam-Status: No
Content-Type: text/plain
Content-Transfer-Encoding: 7bit
X-Content-Filtered-By: Mailman/MimeDel 2.1.5
Cc: FreeBSD-Questions@freebsd.org
Subject: Re: Can login using root password, but not remotely with SSH
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
Reply-To: jamesh@lanl.gov
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 22 Oct 2007 15:01:13 -0000



On Mon, 2007-10-22 at 02:21 -0500, W. D. wrote:

> Brand new install of FreeBSD 6.2.  Can't log in with PuTTY.
> 
> Remote PuTTY:
> Access denied Using keyboard-interactive authentication. 
> 
> At computer terminal:
> PAM authentication error for root from 192.168.XXX.XXX 
> 
> Any ideas?
> 
> Thanks!



Root logins via ssh are disabled by default.

Change this in /etc/ssh/<whichever ssh config file it is>

OR you could alternately decide that root logins are *the spawn of
satan's loins* via ssh, and do something different. Specifically, if you
add your local user account to the wheel group then you can su to root.

vi /etc/groups

Add yourself to wheel (which is the root group on FreeBSD, a name I
believe it inherited from earlier BSDs, but I've no idea what the
justification for choosing 'wheel' is; any BSD historians here - you'd
be welcome to let us know!)


Tada!

If you need root logins for something like a running process that wants
to communicate via several computers as root, then I assume that:
a) your program's broken ;)
b) you wouldn't be using putty.

So just add yourself to wheel and let the good times roll.

James