Linux Help
guides forums blogs
Home Desktops Distributions ISO Images Logos Newbies Reviews Software Support & Resources Linuxhelp Wiki

Welcome Guest ( Log In | Register )



Advanced DNS Management
New ZoneEdit. New Managment.

FREE DNS Is Back

Sign Up Now
 
Reply to this topicStart new topic
> Limit Ssh, What users can log in with it
Termina
post Mar 4 2004, 10:08 AM
Post #1


RMS is my Hero
******

Group: Support Specialist
Posts: 862
Joined: 18-February 04
From: Wisconsin
Member No.: 2,404



Anyone know how I could go about restricting what accounts people can use to log in via SSH?

(I don't want people to be able to log in as root, but I DO want people to be to "su" when alread logged in)


--------------------
*Points finger at the author above him* They're a witch! Burn them!
---
Vist my website!
Join me in IRC! Server: st0rage.org Channel: #UnhandledExceptions
Go to the top of the page
 
+Quote Post
Corey
post Mar 4 2004, 11:44 AM
Post #2


Its GNU/Linuxhelp.net
*******

Group: Admin
Posts: 1,254
Joined: 21-September 02
From: St John's, Newfoundland, Canada
Member No.: 3



First off, add all users that you want to be able to 'su' to root to the wheel group.

As for restricting users to the ssh, you should create a group, say "ssh" and add the users to it that you want to have permission to login remotely via ssh. Then, edit your sshd_config file and look for the "AllowGroups" line, and add "ssh" to it. You can also deny certain users with the DenyUsers and DenyGroups. But, to be more organized, it's easier to just allow groups instead of certain users, and then add and remove users to that group when needed.

As well, you may want to include 'root' in the denyusers part, so no one can attempt to brute force your root password through ssh.


--------------------
Corey Quilliam
(former) Linuxhelp.ca Administrator
cquilliam-AT-gmail-dot-com

Want to help out Linuxhelp.net? Check out our Linuxhelp Wiki and see if there are some articles you would like to submit!!

--
Ubuntu 8.04 64-bit - Work Laptop (HP-Compaq NC6400 Core2)
Kubuntu 8.04 64-bit - Desktop (HP m8120n QuadCore)
Ubuntu 6.04 - Server (I'm not upgrading this baby until support runs out in 2012) (Some old POS dell)
Go to the top of the page
 
+Quote Post

Reply to this topicStart new topic
1 User(s) are reading this topic (1 Guests and 0 Anonymous Users)
0 Members:

 



RSS Lo-Fi Version Time is now: 17th October 2017 - 11:07 PM