No output returned on query command

PONYKaizenJF · 05-20-2019, 12:51 AM

Hi good day!

I tried running query commands on a Ubuntu 16.04 server to know the configuration set up, if it is aligned with the CIS benchmark. There are cases that no output is returned after running the command, Did it mean that it is set up on default settings or there is no configuration at all?

Thank you for your assistance.

Newbie here.

PONYKaizenJF

pan64 · 05-20-2019, 01:13 AM

I think what you wrote is completely meaningless without additional details.

Quote:

running query commands

is a general term,

Quote:

to know the configuration

is just a buzzword.
And in general yes, a query may return an empty answer, but obviously it depends on the details. http://www.catb.org/esr/faqs/smart-q...html#beprecise

PONYKaizenJF · 05-20-2019, 01:30 AM

Hi pan64, for example i tried running these commands and no output were returned. See attached image for the commands executed.

Thank you.

pan64 · 05-20-2019, 01:36 AM

yes, that can be normal. That means (probably) the mentioned config file is [more or less] empty.

PONYKaizenJF · 05-20-2019, 01:41 AM

Does that mean that it is not configured for allowed users, allowed groups, denied users and denied groups?

How about these? same case? or set on default values? See attached image.

Thank you.

pan64 · 05-20-2019, 02:31 AM

you need to check man page of sshd_config to understand the meaning of those settings and how are they handled.
and also check man page of grep to see how does it work.

berndbausch · 05-20-2019, 03:15 AM

Quote:

Originally Posted by PONYKaizenJF

Does that mean that it is not configured for allowed users, allowed groups, denied users and denied groups?

grep returns nothing when the search term is not found in the file. In your case, it means that your sshd_config file doesn’t set these configuration parameters, and the ssh server uses their default values.

Often, the parameters are contained in the file but commented out. Remove the “^” character from your commands to see such lines.

PONYKaizenJF · 05-20-2019, 03:58 AM

Hi pan64 and berndbausch, thank you for your response. I really appreciate it guys!

berndbausch · 05-20-2019, 06:18 AM

All the best for your Linux journey.

ondoho · 05-21-2019, 02:16 PM

Quote:

Originally Posted by PONYKaizenJF

Does that mean that it is not configured for allowed users, allowed groups, denied users and denied groups?

it could also mean that "it" (assuming you mean the program reading the configuration, not the config file itself) uses (builtin) default values.
it could also mean that the configuration options in question are preceded by spaces.