SSH Connect für root auf VMWare ESX

SSH Security
SSH is a commonly used UNIX and Linux command shell that lets you remotely log in
to the service console and perform certain management and configuration tasks for ESX
Server 3. SSH is used for secure logins and data transfers because it offers stronger
protection than other command shells. In this ESX Server 3 release, the SSH
configuration is enhanced to provide a higher security level. Key features of this
enhancement include:

Version 1 SSH protocol disabled – VMware no longer supports Version 1 SSH
protocol and uses Version 2 protocol exclusively. Version 2 eliminates certain
security issues present in Version 1 and provides you with a safer communications
interface to the service console.
Improved cipher strength – SSH now supports only 256‐bit and 128‐bit AES
ciphers for your connections.

Limits on remote logins as root – You can no longer remotely log in as root.
Instead, you log in as an identifiable user and either use the sudo command to
execute specific operations that require root privileges or enter the su command to
become the root user.
These settings are designed to provide solid protection for the data you transmit to the
service console through SSH. If this configuration is too rigid for your needs, you can
lower security parameters.
To change the default SSH configuration
1 Log in to the service console and acquire root privileges.
2 Change directories by entering cd /etc/ssh at the command prompt.
3 Use a text editor to perform any or all of following actions, as appropriate.

To allow remote root login, change the setting to yes in the following line in
the sshd_config file:

PermitRootLogin no

To revert to the default SSH protocol (Version 1 and 2), comment out the
following line in the sshd_config file:

Protocol 2
NOTE The sudo command provides security benefits in that it limits root activities
and helps you check for possible misuse of root privileges by generating an audit
trail of any root activities that the user performs.

To revert to the 3DES cipher and other ciphers, comment out the following line
in the sshd_config file:
Ciphers aes256-cbc,aes128-cbc

To disable Secure FTP (SFTP) on SSH, comment out the following line in the
sshd_config file:

Subsystem ftp /usr/libexec/openssh/sftp-server

4 Save your changes and close the file.
5 Execute the following command to restart the SSHD service:

service sshd restart