On Fri, 12 Feb 2010, Sean Carolan wrote:
> Set up a local root user on every box. I highly recommend not
> on LDAP for that, or you're a bit screwed if, for example, your network
> cable goes bad.
Right, I just made my AllowGroups line look like this:
AllowGroups root operations
AllowUsers appears to trump AllowGroups so this is a good solution.
Ah... you meant how do you allow SSH logins for root.
I misunderstood. To that, I would've answered "don't," but if you want
to allow direct remote root access, that's your call.