Prevent users logging in as root

UNIX Solaris
1

I would like to know how to prevent users connecting to a server using SSH as root.

I would still like them to be able to login with their username and then change to su.

But I would like to prevent them logging in directly as root.

I have searched the forum and read that I should set PermitRootLogin to no.

I am using Solaris 10 and have opened 'sshd_config' to find the line 'PermitRootLogin' which is already set to 'no' but I can log in as username root.

Any ideas?

Thanks

2

in file: /etc/default/login uncomment CONSOLE statement.

# If CONSOLE is set, root can only login on that device.
# Comment this line out to allow remote login by root.
#
#CONSOLE=/dev/console
3

You need to send a HUP signal to sshd or restart sshd.

4

on solaris 10 better use:

svcadm restart ssh