Stop root to login via ssh

it’s not a good idea to give access for “root” direct login. The preferred method is login with a username and run “su” (Super User) to get the root access.  However, root can still login “from the local terminal”.

 To make this feature enable we need to modify sshd_conf with following changes.

 

1. Open /etc/ssh/sshd_config file with vim editor :-

 

[root@afzalkhan ~]#vim /etc/ssh/sshd_config

 

2. Make sure that below two mentioned flags are set with below value :-

 

Protocol 2

PermitRootLogin no

 Briefly about this parameters :-

 Protocol 2 : Protocol 2 the separate connection and authentication protocol are used

PermitRootLogin no : Disable root login via ssh. This will not allow root to connect using ssh protocol.

 

3. [root@afzalkhan ~]$ ssh -C root@192.168.0.50

root@192.168.0.50’s password:

Permission denied, please try again.

root@192.168.0.50’s password:

 

It will not allow root to direct login from remote host via ssh protocol.

Advertisement