[spott]

Does ssh need to allow root logins?

Sshing as a regular user and then sudo to root works 95% of the time…

[jmb99]

How does SSH become an arbitrary user without effective root?

[nine_k]

SSH should not become a different user; it should call something like `/bin/login` which uses PAM for authentication and is capable of starting user sessions.