[OT, I know.]

On Fri, Jul 25, 2008 at 07:14:09PM +0200, Justin Vassallo wrote:
> Meanwhile, I had to permit root login (obviously disabled passwd auth;
> PasswordAuthentication  no; PAMAuthenticationViaKBDInt no).

Why obviously?

I think instead you may just want to:

PermitRootLogin without-password

or

PermitRootLogin forced-commands-only

(See sshd_config(4), which says "without-password means that root cannot
be authenticated using the "password" or "keyboard-interactive" methods"
and "forced-commands-only means that authentication is allowed only for
publickey".)

Also, PAMAuthenticationViaKBDInt has no meaning to sshd.  If you want to
disable 'keyboard-interactive' then use:

KbdInteractiveAuthentication no

and if you want to disable 'password' then:

PasswordAuthentication no

Nico
-- 
_______________________________________________
zfs-discuss mailing list
zfs-discuss@opensolaris.org
http://mail.opensolaris.org/mailman/listinfo/zfs-discuss

Reply via email to