From owner-freebsd-questions@FreeBSD.ORG  Mon Mar  1 06:33:30 2004
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id B8B4416A4CE
	for <freebsd-questions@freebsd.org>;
	Mon,  1 Mar 2004 06:33:30 -0800 (PST)
Received: from out1.smtp.messagingengine.com (out1.smtp.messagingengine.com
	[66.111.4.25])	by mx1.FreeBSD.org (Postfix) with ESMTP id 89C4243D31
	for <freebsd-questions@freebsd.org>;
	Mon,  1 Mar 2004 06:33:30 -0800 (PST)
	(envelope-from nkinkade@fastmail.fm)
X-Sasl-enc: xL7WZyxT/lwtSZ18hpLMIg 1078151609
Received: from [206.26.199.146] (unknown [206.27.244.214])
	by www.fastmail.fm (Postfix) with ESMTP id 07FA668E195;
	Mon,  1 Mar 2004 09:33:27 -0500 (EST)
Received: from nkinkade by [206.26.199.146] with local (Exim 4.12)
	id 1AxoTj-0003Ds-00; Mon, 01 Mar 2004 08:33:07 -0600
Date: Mon, 1 Mar 2004 08:33:07 -0600
From: Nathan Kinkade <nkinkade@ub.edu.bz>
To: Stephen Liu <satimis@icare.com.hk>
Message-ID: <20040301143307.GC11958@nkinkade.bmp.ub>
Mail-Followup-To: Stephen Liu <satimis@icare.com.hk>,
	freebsd-questions@freebsd.org
References: <200403020152.37627.satimis@icare.com.hk>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;
	protocol="application/pgp-signature"; boundary="R+My9LyyhiUvIEro"
Content-Disposition: inline
In-Reply-To: <200403020152.37627.satimis@icare.com.hk>
User-Agent: Mutt/1.4.1i
Sender: Nathan Kinkade <nkinkade@[206.26.199.146]>
cc: freebsd-questions@freebsd.org
Subject: Re: SSH Problem
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
Reply-To: Nathan Kinkade <nkinkade@ub.edu.bz>
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 01 Mar 2004 14:33:30 -0000


--R+My9LyyhiUvIEro
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Tue, Mar 02, 2004 at 01:52:37AM +0800, Stephen Liu wrote:
> Hi all folks,
>=20
> FreeBSD 5.2
> =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
>=20
> I can as 'root'
>=20
> # ssh -X user@localhost
>=20
> tunneling to 'user' but it does not work as 'user'
>=20
> $ ssh -X root@localhost
> Password: <root psword>
> Password: <root psword>
> Password: <root psword>
> root@localhost.localdomain's password: <root psword>
> Permission denied, please try again.
> root@localhost.localdomain's password: <root psword>
> Permission denied, please try again.
> root@localhost.localdomain's password: <root psword>
> Permission denied (publickey,password,keyboard-interactive).
>=20
> Kindly advise how to fix this problem
>=20
> TIA
>=20
> B.R.
> Stephen Liu

You say that this works as root, but your example seems to indicate
otherwise.  By default, root logins via ssh is disabled in the sshd
config file, usually at /etc/ssh/sshd_config.  If for some reason you
want to allow root logins via ssh then uncomment the following line and
change "no" to "yes" - then restart sshd:

PermitRootLogin yes

However, I think this would generally be frowned upon from a security
standpoint.

Nathan
--=20
gpg --keyserver pgp.mit.edu --recv-keys D8527E49

--R+My9LyyhiUvIEro
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (FreeBSD)

iD8DBQFAQ0mjO0ZIEthSfkkRAgJqAKCctBcnocZBRgDIO4/I2n14g5jOIQCgvrL/
xYSkNsc3FEI42nrcw6zVBBU=
=bDU8
-----END PGP SIGNATURE-----

--R+My9LyyhiUvIEro--