Am Samstag, 27. September 2014, 10:06:39 schrieb Daniel Richard G.:
> On Sat, 2014 Sep 27 15:40+0200, Thijs Kinkhorst wrote:
> > So am I right to conclude that this bug actually concerns the change
> > that changes PermitRootLogin to without-password?
> 
> I believe that's the real issue, yes.

[...]
> > However, I recognise that there are people that are using password-
> > based root login who may be surprised by this change. The proper
> > solution therefore may be to add a NEWS.Debian entry so everyone is
> > informed about this change, and a release notes item at that. If those
> > are added, this bug could be closed.
> 
> Is there anything that can be done about the unhelpful auth.log
> messages? Package documentation is good, and the permit-root-login
> debconf question also helps there, but a user who is trying to diagnose
> the issue via syslog could use better hints as to what's going on.

I didn't complain about PermitRootLogin (although this seems to be the bug's 
cause), my issue is that I am *not able to login as root*. Even notes in 
NEWS.Debian wouldn't let me login as root. If not changing would mean that it 
is still needed to patch the system. 
Digging down to manuals/config files is quite uncomfortable.

IMHO it remains best practice of the installer to ask for enable/disable as 
usual (with default to "no", but I KNOW HOW TO ANSWER....). 
I would be really happy to still have the choice from the installer (this does 
not reduce security of a default installation).


-- 
To UNSUBSCRIBE, email to debian-ssh-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/2838287.jcfdCjoOhq@thinkpad-r52

Reply via email to