On Tue, Dec 2, 2014 at 1:33 PM, Jakub Hrozek <jhrozek@redhat.com> wrote:

On Tue, Dec 02, 2014 at 01:28:53PM -0800, Octavian Afilipoai wrote:
> I have root ssh logins disabled by default, and I was using this
> (root user in an ldap group with ssh access) as a quick
> way of enabling root to login via ssh on a temporary basis.

Isn't it better to enable sudo from the ldap group, then?

That was the other option. Though, I've had some issues with sudo requiring a tty when invoked from a ssh command (ssh user@host "sudo ..."). I'll see if I can find a solution for that.