Alex Rhomberg wrote:
<snip>

On our LEAF boxen, we allow direct root login, but only using pubkey auth.
I move the public key file to a central location with the sshd_config lines

PermitRootLogin 		yes
AuthorizedKeysFile      /etc/ssh/pubkeys/%u.pub
PasswordAuthentication 	no

Then a concatenate the public keys of all persons that are allowed access to
the fw in /etc/ssh/pubkeys/root.pub
This way, I don't have to share secret information (the root pw)
- Alex

Alex,

Thanks for your insight. Yep. I had a lot of bad ideas trying to get to the answer. For as good as google is, I was amazed that it did not find something. But then I should have read the man page instead of relying completely on google!

Thanks,
Greg Morgan



-------------------------------------------------------
This SF.NET email is sponsored by: Take your first step towards giving your online business a competitive advantage. Test-drive a Thawte SSL certificate - our easy online guide will show you how. Click here to get started: http://ads.sourceforge.net/cgi-bin/redirect.pl?thaw0027en
------------------------------------------------------------------------
leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html

Reply via email to