Hi Jamie,

Firstly, I'm curious with what sshd_config settings does sshd allow you
to connect having such root line in /etc/shadow without supplying
password.

Because even if I supply this config (neither of which I use in
practice):

PermitRootLogin yes
PasswordAuthentication yes

I still can't login as root with empty password via SSH.

Secondly, while my original suggestion was wrong and nonull or nullok is
not the main problem (it's just a coincidence that using nonull helps in
my case), when you're disabling root login like this (exclamation mark
in the password field, which has a special meaning of locking the
account), do you realize you disable root login by SSH keys as well? It
would have been much better to replace with an asterisk which achieves
what you need to do and does not lock other people out.

/etc/shadow
root:!:14210:0:99999:7:::

/var/log/auth.log
Dec  5 18:12:37 root sshd[3387]: User root not allowed because account is locked

Jan

-- 
root account has ! as default password
https://bugs.launchpad.net/bugs/296841
You received this bug notification because you are a member of Ubuntu
Bugs, which is a direct subscriber.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to