Disable direct root login using ssh

[marvik]

Dear All,

I want to block direct ssh root login.I am using putty.Want to ensure users login with their id and then su to root.I searched in sshd_config file but couldn't see the relevant parameter.Am i missing something?

Thanks & Rgds

[Jaime Bolanos Rojas.]

Marvik,

Check this old thread, it will guide you on what you want to do

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=1042982

Regards,

Jaime.

[Marvin Strong]

Place PermitRootLogin no in sshd_config.

[Mel Burslan · Accepted solution]

echo "PermitRootLogin no" >> /opt/ssh/etc/sshd_config
(depending on your version of ssh config file location might differ but this location is good for recent versions of ssh, like 3.8x or 4.x)


/sbin/init.d/secsh stop
/sbin/init.d/secsh start


Hope this helps.

[DCE]

create /etc/securetty with one line

console

This will prevent direct root logins in non-cde environments except from the console

[marvik]

Marvin,

Do i need to restart sshd after that,I changed the parameter.

Thanx

[Patrick Wallek]

Probably.

Better safe than sorry.

[Mel Burslan]

yes you will need to restart sshd as I described in my previous post

[Marvin Strong]

yes as a general rule whenever you change a parameter to any daemon you will need to restart it.

[marvik]

Thanks to all,

Its working fine,after restarting secsh

Rgds
Marvik