At 10:51 PM -0700 7/21/07, Walter Ian Kaye wrote:
At 11:24 p -0400 07/21/2007, Chris Pepper didst inscribe upon an electronic papyrus:

A better option would be to use a private/public keypair for access to the root account ("PermitRootLogin without-password" in /etc/sshd_config), so people cannot break into root by trying random passwords, but you can get access with the private key.

After hearing about this option, I have a question: Is there a tutorial?
And another question: what if you lose your key via some mishap?

They are easy to regenerate and replace (and free); you could of course use 'sudo' or login physically at the 'console' to replace root's trusted keys.

My tutorial (intended to become part of a book) is <http://www.extrapepperoni.com/2007/03/24/tcossh-public-key-authentication/>.


                                                Chris
--
Chris Pepper:                <http://www.reppep.com/~pepper/>
The Rockefeller University:  <http://www.rockefeller.edu/>
** I will be on vacation July 23-27, returning July 30.
** Please call the Help Desk at x8940 if you need assistance.

--
------------------------------------------------------------------
Have a feature request? Not sure the software's working correctly?
If so, please send mail to <[EMAIL PROTECTED]>, not to the list.
List FAQ: <http://www.barebones.com/support/lists/bbedit_talk.shtml>
List archives: <http://www.listsearch.com/BBEditTalk.lasso>
To unsubscribe, send mail to:  <[EMAIL PROTECTED]>

Reply via email to