i have read that getting rid of root login is better for security

if so how would i add user names then give proper permission to do root things?

Maybe it is about blocking remote login and allow only local access for root ?

Just curious, where did you read that ?

i have to login to my server using ssh, that would make me remote, no?

http://www.howtogeek.com/howto/linux...ogin-on-linux/

As the article says, you login via ssh as normal user and then use sudo or su to get root privileges

like this?

root user:
normal user:

Exactly, it requires that you configured the /etc/sudoers file with visudo command
(which requires a little knowledge of the vi text editor functions)

Or you can just login to root, with su:

su -
password:

what did you mean by this please

now its asking me for a sudo password
dont remember ever making one, so im locked out of sudo!
what can i do???

sudo asks for your user password

To use su, you just type: su - (and enter)
then use root password

There is an option to circumvent the password prompted by sudo command.
First login as "root", the execute visudo then you need to provide "NOPASSWD:ALL" and the end of the line for the user. Something like this:

This will allow admin user to perform all the task with the root access without prompting the password.
This approach is not good as it makes user admin as powerful as root.

Moral of the story is to use "NOPASSWD:" prefix for the commands.

Hope this will solve the problem with the password prompt.

Next, it is always helpful to block the root user from directly log in remotely. To do so, edit the sshd configuration file, for the rpm based operating systems it is at /etc/sshd/sshd_config
Enable the Do not forget to reload/restart the sshd service.

Unless you like contradicting yourself the moral of the story is to NOT grant "NOPASSWD:" rights indiscriminately.

unSpawn++

Above is more appropriate than mentioned earlier.

1 members found this post helpful.