[j-nsp] root-login via ssh and 11.x

Julien Goodwin jgoodwin at studio442.com.au
Tue Jun 26 08:14:16 EDT 2012


On 26/06/12 22:09, Nick Kritsky wrote:
> FYI: It looks like in version 11 Juniper has changed default settings
> for "system services ssh root-login".
> Now if you want to login as root via ssh, you have to explicitly allow
> it. in 10.X it was allowed by default.
> Tested on EX-4200, SRX-100.
> 
> Funny thing is that documentation is still claiming that default
> setting is to allow:
> http://www.juniper.net/techpubs/en_US/junos11.4/topics/reference/configuration-statement/root-login-edit-system.html
> I don't have any device with 12.1 to test, but I suspect that the
> problem exists there as well.
> 
> If anyone from J is reading - please update documentation or JunOS
> defaults. It would be nice to keep them in sync.

And a warning in the upgrade notes, I'm sure there's at least one site
that only uses root. (No, nobody I've every worked for has that, at
least on Juniper kit)

-- 
Julien Goodwin
Studio442
"Blue Sky Solutioneering"

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 262 bytes
Desc: OpenPGP digital signature
URL: <https://puck.nether.net/pipermail/juniper-nsp/attachments/20120626/d28add55/attachment.sig>


More information about the juniper-nsp mailing list