[PLUG] Best Practice for a Non-Best Practice task....

[Dan Young]

On Sat, May 10, 2008 at 12:43 PM, Sean Whitney <sean.whitney at gmail.com> wrote:
> I want to start backing up our remote servers using dirvish with SSH.
> This however requires that I allow remote root login through ssh.
>
> I'm trying to figure out the best way of doing this.
>
>
> In /etc/sshd_config I need to set
> PermitRootLogin yes
>
> But is there a way to require root (an only root) to require ssh key
> exchange and not allow remote password login?

"man 5 sshd_config" says PermitRootLogin can be "without-password' in
which case password authentication is disabled for the root user. See
also the "forced-commands-only" option.

-- 
Dan Young