Re: [CentOS] Antwort: Re: Change from Root

2009-10-27 Thread Frank . Brodbeck
Les Mikesell schrieb am 27.10.2009 16:29:18: > frank.brodb...@klingel.de wrote: > > Les Mikesell schrieb am 27.10.2009 16:04:56: > > > >> Victor Subervi wrote: > >>> What I was interested in doing was to make it impossible for root to > >>> login directly, but rather enable other users to l

Re: [CentOS] Antwort: Re: Change from Root

2009-10-27 Thread Rainer Traut
frank.brodb...@klingel.de schrieb: > Please, *don't* restart the service. If you fuck up your sshd_config > and you have no OOB remote access you're lost. `service sshd reload' is > something more recommendable as it doesn't drop your current SSH sessions. No, it seems it is safe to restart sshd

Re: [CentOS] Antwort: Re: Change from Root

2009-10-27 Thread Victor Subervi
The RedHat docs worked. Thanks! V On Tue, Oct 27, 2009 at 11:28 AM, Victor Subervi wrote: > Well, I'm baffled. Changing to this: > PermitRootLogin no > does nothing without reboot. With respect to the other, I have the > following documentation: > > # Set this to 'yes' to enable PAM authenticatio

Re: [CentOS] Antwort: Re: Change from Root

2009-10-27 Thread Les Mikesell
frank.brodb...@klingel.de wrote: > Les Mikesell schrieb am 27.10.2009 16:04:56: > >> Victor Subervi wrote: >>> What I was interested in doing was to make it impossible for root to >>> login directly, but rather enable other users to login and then su to >>> root. So I edited /etc/ssh/sshd_conf

Re: [CentOS] Antwort: Re: Change from Root

2009-10-27 Thread Victor Subervi
Well, I'm baffled. Changing to this: PermitRootLogin no does nothing without reboot. With respect to the other, I have the following documentation: # Set this to 'yes' to enable PAM authentication, account processing, # and session processing. If this is enabled, PAM authentication will # be allow

[CentOS] Antwort: Re: Change from Root

2009-10-27 Thread Frank . Brodbeck
Les Mikesell schrieb am 27.10.2009 16:04:56: > Victor Subervi wrote: > > What I was interested in doing was to make it impossible for root to > > login directly, but rather enable other users to login and then su to > > root. So I edited /etc/ssh/sshd_config to read: > > #PermitRootLogin no >