Reporter: Sebastian[at]SSpaeth.de
[Submitted to the original trac issue database at 11.05am, Friday, 20th July 2007]

Currently everyone (including root) can remotely log into the dev server. Given, that I don't even know the root password (it might be 123 for what i know), that seems very insecure. I would love to either disable direct root access (which would require people to sudo after logging in) or to disable password access completely for all people and require ssh key authentication.

As it is right now, password crackers have all the time of the world to try out passwords.