looked at the sticky, and this is what it says:

I can create another group and then su to root. not a problem. it's been done already.

so when i go into the sshd_config fiile, I go to the line:
#LoginGraceTime 120
#PermitRootLogin yes
#StrictModes yes

it's been change to:
#LoginGraceTime 120
#PermitRootLogin yes
#StrictModes yes

is there anything else I'm missing?
edit: first post! woohooo!

Welcome to the forums!

Add the line "PermitRootLogin no" to your sshd_config file to disable root login via SSH.

thanks Klaude!


one other thing I caught:
"
uncomment it and change it to PermitRootLogin no
then restart SSHD with /etc/rc.d/init.d/sshd restart
"

I had to restart sshd. !

check, it's still letting me login as root.

I've updated the shhd_config file and restarted sshd. still doesn't work.

Ideas?

Do you have any other uncommented PermitRootLogin files in sshd_config? To be sure are you editing the file /setc/ssh/sshd_config?

While we are on the subject, does anyone know once you have direct root login disabled, if you are able to login as root using a public/private key pair?

I have been experimenting with it, but without much success.

I need to be able to run WinSCP, but it is only useful if you can log in as root.

Ideas? Step by step walkthroughs?

the file i am editing is: /etc/ssh/sshd_config and not the /setc/ssh/sshd_config

wouldn't su to root after you logged in, work as well? :dunno:

Gah thats my bad. It begins with /etc.

That is correct. I'm pretty sure Kevin meant /etc/.

hmmm....i thought so.

now, what have i missed. I did everything as expected, this is what I have for the sshd_config file (via cut/paste:)
# Authentication:

#LoginGraceTime 120
#PermitRootLogin no
#StrictModes yes


then I did a restart.... welp!

From WinSCP faq:
"But most of the servers (maybe all) require TTY terminal to execute su command. It makes them sure that a human is sitting by the client. Unfortunatelly WinSCP cannot use TTY terminal, because it is not compatible both with SFTP and SCP protocol."

Is there any other remote GUI file browser?

Uncomment PermitRootLogin no (delete the # before it).

doh! But when I updated the sshd_config gile with the uncommented, restarted, and it's still letting me login as root!

Check for another PermitRootLogin with "yes" somewhere else in the file.

i believe there is only one instance, but checked anyhow and nadda.

I did it at last!!!!!!! woohoo!

here's the changes:
#LoginGraceTime 120
PermitRootLogin no
StrictModes no

I said "no" to the StrictMode argruement!

Don't use "PermitRootLogin no". Use "PermitRootLogin without-password" instead. This will allow logins by root only when a password is not used (I.E. when an RSA key is being used as the authentication method). I have this set on the servers that I administrate to allow server to server copying from/to root-protected areas.

+++++ update +++++
I just realized that I am a whole year late on this. Hopefully this helps someone.