up vote 103 down vote favorite
52

I´d like to enable the ssh root access on Ubuntu 14.04. Editing the /etc/ssh_config (PermitRootLogin yes) didn't affect anything.

share|improve this question
up vote 161 down vote

Simply adding a password for root is not enough for Ubuntu 14.04 Server.

You also need to edit /etc/ssh/sshd_config, and comment out the following line:

PermitRootLogin without-password

Just below it, add the following line:

PermitRootLogin yes

Then restart SSH:

service ssh restart

For Ubuntu 16.04.1 LTS (GNU/Linux 4.4.0-59-generic x86_64) PermitRootLogin without-password has been replaced by PermitRootLogin prohibit-password.

share|improve this answer
6  
When doing this via ssh, service ssh reload is useful. – Torsten Römer Oct 14 '14 at 12:48
    
I was running Ubuntu on VM, however I don't know these changes didn't work till i restarted VM once (may be i need to stop/start network services in addition to above steps however I'm not sure). – VSB Dec 6 '14 at 18:54
    
I have to do PermitRootLogin yes because I had plain password – JorgeeFG Feb 10 '15 at 18:39
1  
If doing this while ssh or scp tells you "Permission denied, please try again" in another window, quit and retry that ssh (or scp) instead of just re-typing in the password. – Camille Goudeseune Feb 10 '15 at 21:48
1  
Also don't forget to check if root is mentioned in sshd_config: AllowUsers root – Jan Dec 13 '16 at 23:31
up vote 33 down vote

You need to setup a password for the root account and then it will work.

sudo passwd

Enter same password twice.

P.S. After modifying /etc/ssh/sshd_config don't forget to reload the openssh server.

sudo service ssh reload
share|improve this answer
2  
This will work; but to the OP: think twice before doing it. If you still do, and your PC is on the internet, consider adding fail2ban to the system. (This comment is related to enabling root login via ssh; having or not a local password for root is just a matter of taste). – Rmano May 19 '14 at 14:08
up vote 8 down vote

With Ubuntu 14.04 Server.

Set the password

sudo passwd

Changes in /etc/ssh/sshd_config

Change PermitRootLogin

PermitRootLogin yes

You may also have to check value of PasswordAuthentication. If it is set to no then set to yes

PasswordAuthentication yes

Then restart SSH:

service ssh restart

share|improve this answer
    
This is the only complete answer. Other answers are missing some part. – wisbucky Sep 26 '17 at 18:00
up vote 2 down vote

For 14.04 you would have to comment below line in /etc/ssh/sshd_config

#StrictModes yes
share|improve this answer
3  
Instead of disabling file mode checking, it would be better to ensure, that /root/.ssh and the files therein are not readable by any other user than root. – Adaephon Aug 3 '14 at 18:59
up vote -1 down vote

For me, none of these steps worked, I've even tried something I wouldn't ever try for something else then a toy vm: PermitRootLogin without-password

The only thing that worked for me was disabling the PAM module for this:

UsePAM no

This option is normally at the very end of the file. To be honest, I don't know the real drawbacks of this, but since you're not supposed to allow root login online, I guess it's okay for a private dev-vm.

Nevertheless, set a strong password, always. Nope this is not an exception. Not even only this time...

share|improve this answer
4  
PermitRootLogin without-password doesn't mean the root user gets to log in without authentication. It means the root user isn't allowed to log in with a password. Instead, the root user must log in utilizing RSA keys, which is more secure. – Craig May 8 '15 at 23:20
    
@Craig the problem I'm referring to is not that root would then need to use RSA SSH-Keys. The problem is that root is a user everyone knocking on the door of your SSH-Server knows exists. Which is not a good thing in my opinion. But feel free to let root login via SSH, but as you said, at least make sure it's using keys to do so! – Kjellski May 9 '15 at 16:13
4  
You said you wouldn't try PermitRootLogin without-password for anything but a toy VM. That is what you use to disable password authentication for root, so that the only way root can logon is using RSA keys. You did not state that you tried that option with RSA keys. If you tried that option without keys, there's no way it could succeed. If you use PermitRootLogin without-password, then you cannot log on using password authentication at all, not with a strong password, not with a blank password, not at all. – Craig May 10 '15 at 2:30

protected by Community♦ Nov 6 '14 at 14:39

Thank you for your interest in this question. Because it has attracted low-quality or spam answers that had to be removed, posting an answer now requires 10 reputation on this site (the association bonus does not count).

Would you like to answer one of these unanswered questions instead?

Not the answer you're looking for? Browse other questions tagged or ask your own question.