At 11:17 PM +0300 6/2/07, Andrey Shmigelsky wrote: >Look in /etc/ssh/sshd_config for the line >#PermitRootLogin yes PermitRootLogin is set to "no" on the machines that I ssh into as a normal user and then "su -" to root. Well, on one of the machines it's set to "without-password" to allow a key login (probably should be forced-commands-only, though). Setting it to "yes" allows direct root ssh logins; setting it to "no" makes such logins fail. As Ian says, PermitRootLogin has no effect on "su -", which is why I hadn't mentioned it. -- ____________________________________________________________________ TonyN.:' <mailto:tonynelson@xxxxxxxxxxxxxxxxx> ' <http://www.georgeanelson.com/>