Announce: OpenSSH 6.9 released

Philipp Marek philipp.marek at linbit.com
Wed Jul 1 17:34:32 AEST 2015


> Future Deprecation Notice
> =========================
> 
> The 7.0 release of OpenSSH, due for release in late July, will
> deprecate several features, some of which may affect compatibility
> or existing configurations. The intended changes are as follows:
> 
>  * The default for the sshd_config(5) PermitRootLogin option will
>    change from "yes" to "no".
Uh, wouldn't "without-password" be a better alternative than "no"?

Getting the *first* authorized key on would still be "hard" (as in
"ssh user at ...", "su"|"sudo", "mkdir -m 0700 .ssh", "cat > .ssh/auth.."),
but at least *further* keys could be done via "ssh-copy-id".


I don't have any statistics handy, but I believe that public-key
root authentication is widely used.
(And sometimes needed - especially when something goes wrong,
needing to authenticate as a normal user is one more thing that
can go wrong - think NIS or LDAP failures, etc.)



More information about the openssh-unix-dev mailing list