> Yes, I understand why root can log in in this scenario, on a technical > level. I'm questioning its usefulness. You're questioning the usefulness of root logging in from the console? If I go to a users machine that has hosed up b/c something went stupid with a network driver, I'd like to be able to login. drop the device, bring it back up and not have to reboot the machine. > You expect normal users in an LDAP setup to be able to debug their > network adapter? And for sysadmins to want to give them the root > password just for this scenario in the first place? I was arguing against what I _thought_ I read, which was getting rid of ALL root logins. Including tty. -sv