Disabling Remote Logins From Root Accounts

Remote root login must be disabled on all N1 Provisioning servers as described by the following procedure. When remote root login is disabled, root accounts can log in only on the system console.

If the N1 Image server is installed on a separate machine, the following procedure must also be done on the image server machine.

To Disable Remote Root Account Logins

Steps

1. Log in as root (su - root) on the control plane server.

2. Edit the file /etc/default/login.

3. Locate the line that contains the text string CONSOLE=/dev/console.

   If the line is commented out, remove the comment symbol #.

4. Make certain the /etc/default/login file contains only one CONSOLE=/dev/console line.

5. Save and close the file.

See Also

For more information, see the login(1) man page.