That's strange because it's exactly what the code does: https://github.com/vyos/vyatta-cfg-system/blob/current/templates/service/ssh/allow-root/node.def

In T167#3350, @EwaldvanGeffen wrote:

That's strange because it's exactly what the code does: https://github.com/vyos/vyatta-cfg-system/blob/current/templates/service/ssh/allow-root/node.def

but if we look at /etc/ssh/sshd_config
there is no
PermitRootLogin yes... and more, if we manually add this line, login as root is not permitted as well.

more:
in "/etc/ssh/sshd_config" we must manually locate the line with "PermitRootLogin" and set to "PermitRootLogin yes".

The
vyatta-cfg-system/templates/service/ssh/allow-root/node.def
does not work because in sshd_config the line is not
"PermitRootLogin no" but instead "PermitRootLogin without-password".

So, it does not change anything.

Okay, so maybe we should expand the configuration in that case a little. Let's make it replace whatever value is found and allow all three options in the CLI?

yes, I think so, otherwise allow-root actually has no effect :)

@mdsmds you sure that is not it's intended purpose; scare away people from enabling root on their boxes ;p I'm hoping to have some time soon to do some small stuff like this.

@EwaldvanGeffen I could agree...

1. completely remove "allow-root" from "set service ssh"

or

2. let it really operating

but one of two.

Thanks