Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I want to leave the root user enabled on my servers for convenience, and the only reason people are against the idea (that I know of) is brute-force attacks on SSH.

So, is there is a way in SSH to enable password access for all users except root, but allow ssh-key access for root?

OS: Ubuntu Server Edition 10.04 x86

SSH Version: OpenSSH_5.3p1 Debian-3ubuntu7, OpenSSL 0.9.8k 25 Mar 2009

share|improve this question
possible duplicate of Disable ssh password authentication by user – quanta Oct 31 '11 at 4:44
This isn't exactly a duplicate, since there is a root-specific alternative. – Ignacio Vazquez-Abrams Oct 31 '11 at 4:47
up vote 12 down vote accepted

From the sshd_config(5) man page:


        If this option is set to “without-password”, password authentica-
        tion is disabled for root.
share|improve this answer
Thank you! I usually read the manual before asking, but this seemed sufficiently complicated enough not to be in the manual. I was expecting some kind of iptables solutions, but this is better, obviously! – Soviero Oct 31 '11 at 4:51
I would be kind of wary of putting PermitRootLogin without-password into my sshd configuration! – Michael Kjörling Oct 31 '11 at 10:10

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.