2006-02-07 21:07:54 +01:00
|
|
|
To enable this port, add openssh_enable="YES" in your rc.conf. To
|
|
|
|
|
prevent conflict with openssh in the base system add sshd_enable="NO"
|
2009-09-23 20:44:47 +02:00
|
|
|
in your rc.conf. Also you can configure openssh at another TCP port (via
|
|
|
|
|
sshd_config 'Port' and 'Listen' options or via 'openssh_flags'
|
|
|
|
|
variable in rc.conf) and run it in same time with base sshd.
|
2001-06-01 16:49:36 +02:00
|
|
|
|
2006-02-07 21:07:54 +01:00
|
|
|
'PermitRootLogin no' is the default for the OpenSSH port.
|
2002-07-05 05:59:51 +02:00
|
|
|
This now matches the PermitRootLogin configuration of OpenSSH in
|
|
|
|
|
the base system. Please be aware of this when upgrading your
|
|
|
|
|
OpenSSH port, and if truly necessary, re-enable remote root login
|
|
|
|
|
by readjusting this option in your sshd_config.
|
|
|
|
|
|
|
|
|
|
Users are encouraged to create single-purpose users with ssh keys
|
|
|
|
|
and very narrowly defined sudo privileges instead of using root
|
|
|
|
|
for automated tasks.
|
