How to Enable and Disable Root Login via SSH on Ubuntu

[@s.gardner7576]

A major point worth mentioning is to make sure there is no "#" sign in front of "PermitRootLogin no" or AllowUsers if needed. Basic but very necessary for this to work. Especially for viewers new to Linux.

[@TonyTeachesTech]

Thanks for pointing this out

[@DHRUUVable]

You don't know what this comment has done to me. I can't thank you enough. I was stuck in this from whole day and never noticed that # shouldn't be there. God!! thank you so much.

[@suryatejaswi659]

Thanks man i didnot have that allowusers line in the file so i was looking whatsgoing wrong ,thanks again

[@TonyTeachesTech]

You can simply add this line if it isn't there

[@jackt6112]

I've done this same procedure countless times in UNIX and AlmaLinux and it worked perfectly. I'm doing it in Linux Mint being used as an Internet server and this procedure does not work. I''ve tried from both the public and private vlan interfaces. I can log in as a regular users, but not as root. Yes, sshd has been restarted and I even rebooted. I can RDP in as root and launch terminal, but not ssh as root. Weird!

[@limamey4175]

Hello what program do you use in the video?

[@TonyTeachesTech]

On my MacBook, I am using the built-in Terminal program

[@alexander.k94]

When i type root@myip it requires password. Any ideas?

[@vilaskhadka2626]

after rootpermit no done if we have to do some major changes in system then how we can login in root.

[@TonyTeachesTech]

What?

[@benjibeatsboy]

Hello man, What if the sshd_config does not exist? In my case it does not exit. What can I do?

[@TonyTeachesTech]

Maybe you have to install it first?
apt install openssh-server

[@benjibeatsboy]

@@TonyTeachesTech thanks I will try

[@juniorthian2370]

Great !!!

[@TonyTeachesTech]

Thanks

[@afriendlynorwegianguy3284]

i am trying to enable root login via ssh and i have said yes to permitrootlogin thing and restarted the service and server, but it does not alow me to login. any tips?

[@TonyTeachesTech]

Does your /etc/ssh/sshd_config file still have permitrootlogin enabled?

[@afriendlynorwegianguy3284]

@@TonyTeachesTech yes it does

[@TonyTeachesTech]

@@afriendlynorwegianguy3284 Do you also have AllowUsers root like here 1:37

[@afriendlynorwegianguy3284]

@@TonyTeachesTech no I don't, il try that tomorrow as it is quite late here In Norway:) thanks for the help

[@nameeralketti5734]

Thanks

[@TonyTeachesTech]

No problem

[@dennyi.s.7860]

how to save the line changes ?, i press ctrl X nothing changes

[@TonyTeachesTech]

Press Esc then type :wq and hit Enter ruclips.net/video/uE4aljoMBeg/видео.html

[@dennyi.s.7860]

Thanks, well noted. You are the best

[@BMAPS]

Tried this on ubuntu EC2 instance, showing permission denied (publickey)

[@TonyTeachesTech]

I'm not too familiar with EC2 right now, but do you know if EC2's have ssh enabled by default?

[@BMAPS]

@@TonyTeachesTech yes they do

[@TonyTeachesTech]

@@BMAPS Is it port 22?

[@BMAPS]

@@TonyTeachesTech yes port 22 is enabled

[@TonyTeachesTech]

@@BMAPS In that case, I don't know. I'm guessing there is an issue with your key.

[@Eggsec]

So I'm working on an assessment, I was able to find the root password using Medusa.
Now, I'm trying to ssh roo@××.xx.xx.xx. I get permission denied (publickey)
I think I found my answe watching you video.
Is there another way to get my footin with knows ssh credentials?

[@bluestreak711]

I followed the instructions and got this to pop up, but I do not see the allowed users part. "#MaxSessions 10
#PubkeyAuthentication yes
# Expect .ssh/authorized_keys2 to be disregarded by default in future.
AuthorizedKeysFile .ssh/authorized_keys .ssh/authorized_keys2
#AuthorizedPrincipalsFile none
#AuthorizedKeysCommand none
#AuthorizedKeysCommandUser nobody
# For this to work you will also need host keys in /etc/ssh/ssh_known_hosts
#HostbasedAuthentication no
# Change to yes if you don't trust ~/.ssh/known_hosts for
# HostbasedAuthentication
#IgnoreUserKnownHosts no
# Don't read the user's ~/.rhosts and ~/.shosts files
#IgnoreRhosts yes
# To disable tunneled clear text passwords, change to no here!
#PasswordAuthentication yes
#PermitEmptyPasswords no
# Change to yes to enable challenge-response passwords (beware issues with
# some PAM modules and threads)
ChallengeResponseAuthentication no
# Kerberos options
#KerberosAuthentication no
#KerberosOrLocalPasswd yes
#KerberosTicketCleanup yes
#KerberosGetAFSToken no
# GSSAPI options
#GSSAPIAuthentication no
#GSSAPICleanupCredentials yes
#GSSAPIStrictAcceptorCheck yes
-- INSERT -- 44,1 41%
"

[@TonyTeachesTech]

Oh that's okay. Feel free to add this line if it does not exist