sshd and pam

Lowell Gilbert freebsd-questions-local at be-well.ilk.org
Wed Jul 27 18:20:54 GMT 2005


[Message reformatted.]

<cartman_step1 at spymac.com> writes:

> yes i'm logging in as root , now i have understand , cause i can log
> in as a normal user . But then it's possible to log in as root , so
> i can administrate remotely the machine on the lan?

su(8).  
[personally, I'm fond of sudo, which is in the ports]

Letting root log in directly leaves you with no audit trail, and a
single point of failure in your security scheme.  You can configure
sshd to let root log in, but I don't generally advise it for a network
on the Internet.


More information about the freebsd-questions mailing list