topic Re: Disable direct root login using ssh in Operating System - HP-UX

Disable direct root login using ssh

marvik — Wed, 13 Sep 2006 09:18:35 GMT

Dear All,

I want to block direct ssh root login.I am using putty.Want to ensure users login with their id and then su to root.I searched in sshd_config file but couldn't see the relevant parameter.Am i missing something?

Thanks & Rgds

Re: Disable direct root login using ssh

Jaime Bolanos Rojas. — Wed, 13 Sep 2006 09:20:22 GMT

Marvik,

Check this old thread, it will guide you on what you want to do

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=1042982

Regards,

Jaime.

Re: Disable direct root login using ssh

Marvin Strong — Wed, 13 Sep 2006 09:22:25 GMT

Place PermitRootLogin no in sshd_config.

Re: Disable direct root login using ssh

Mel Burslan — Wed, 13 Sep 2006 09:23:33 GMT

echo "PermitRootLogin no" >> /opt/ssh/etc/sshd_config
(depending on your version of ssh config file location might differ but this location is good for recent versions of ssh, like 3.8x or 4.x)

/sbin/init.d/secsh stop
/sbin/init.d/secsh start

Hope this helps.

Re: Disable direct root login using ssh

DCE — Wed, 13 Sep 2006 09:23:55 GMT

create /etc/securetty with one line

console

This will prevent direct root logins in non-cde environments except from the console

Re: Disable direct root login using ssh

marvik — Wed, 13 Sep 2006 09:26:15 GMT

Marvin,

Do i need to restart sshd after that,I changed the parameter.

Thanx

Re: Disable direct root login using ssh

Patrick Wallek — Wed, 13 Sep 2006 09:27:22 GMT

Probably.

Better safe than sorry.

Re: Disable direct root login using ssh

Mel Burslan — Wed, 13 Sep 2006 09:27:56 GMT

yes you will need to restart sshd as I described in my previous post

Re: Disable direct root login using ssh

Marvin Strong — Wed, 13 Sep 2006 09:29:27 GMT

yes as a general rule whenever you change a parameter to any daemon you will need to restart it.

Re: Disable direct root login using ssh

marvik — Wed, 13 Sep 2006 09:31:57 GMT

Thanks to all,

Its working fine,after restarting secsh

Rgds
Marvik