Documentation survey

Remote root login on SL Micro

For enhanced security, new installations of SL Micro 6.1 and later do not allow password-based remote root login anymore, which also affects server and proxy container hosts running on SL Micro and managed SL Micro clients. Also SLE Micro 5.5 clients with password-based remote root login which will when be migrated to 6.1/6.2 will suddenly lose this access and must be newly configured. For more information, see SL Micro Release Notes 6.1 (https://www.suse.com/releasenotes/x86_64/SL-Micro/6.1/index.html#jsc-SMO-405).

While deploying components of SUSE Multi-Linux Manager such as a SUSE Multi-Linux Manager Proxy, by default, password-based remote root login is required. You can enable password-based remote root login with the following steps.

Procedure: Enable SSH root login with a password on SL Micro

You can enable SSH root login in two different ways. Either of them will work; choose the one that best fits your setup.

Option A: Use the preconfigured package
  1. Install the package openssh-server-config-rootlogin from the UI/API on the client.

  2. Reboot the container host to activate the new configuration either from UI or from terminal

Option B: Edit the SSH configuration manually
  1. Add a drop-in config /etc/ssh/sshd_config.d/permit_root.conf file, with the following content:

    PermitRootLogin yes
  2. Reload the SSH server configuration

    systemctl reload sshd
  3. If connected using SSH, before disconnecting from the server, validate the SSH server is working correctly by opening a new SSH connection.

For more information about transactional-update, see https://documentation.suse.com/sle-micro/6.1/html/Micro-transactional-updates/.