Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question?
If it is not in the man pages or the how-to's this is the place! |
Notices |
Welcome to LinuxQuestions.org, a friendly and active Linux Community.
You are currently viewing LQ as a guest. By joining our community you will have the ability to post topics, receive our newsletter, use the advanced search, subscribe to threads and access many other special features. Registration is quick, simple and absolutely free. Join our community today!
Note that registered members see fewer ads, and ContentLink is completely disabled once you log in.
Are you new to LinuxQuestions.org? Visit the following links:
Site Howto |
Site FAQ |
Sitemap |
Register Now
If you have any problems with the registration process or your account login, please contact us. If you need to reset your password, click here.
Having a problem logging in? Please visit this page to clear all LQ-related cookies.
Get a virtual cloud desktop with the Linux distro that you want in less than five minutes with Shells! With over 10 pre-installed distros to choose from, the worry-free installation life is here! Whether you are a digital nomad or just looking for flexibility, Shells can put your Linux machine on the device that you want to use.
Exclusive for LQ members, get up to 45% off per month. Click here for more info.
|
 |
09-25-2003, 10:46 AM
|
#1
|
Member
Registered: Sep 2002
Posts: 184
Rep:
|
ssh access allowed only to root user?
I know I can give ssh permission to a specific ip or range of ip, but is it possible to give it to a specific user?
I my case I would like only root to be able to connect via ssh
thx 
|
|
|
09-25-2003, 11:21 AM
|
#2
|
Moderator
Registered: May 2001
Posts: 29,415
|
Yes you can (man sshd_config, see the AllowUsers/AllowGroups directive), and no you must not do that: use an unprivileged login to get to the box and then use sudo to su to the root account.
|
|
|
09-25-2003, 11:43 AM
|
#3
|
Member
Registered: Sep 2002
Posts: 184
Original Poster
Rep:
|
man sshd_config, great  thx
why shouldn't I do that? I mean, usually I ssh to config my computer so I do it using root.
oh I get it, it will transfert the root password via the internet....
ok I'll allow my user then... but if I su to root I will be required to enter the password anyway, so what is the difference?
great advice thx unSpawn 
|
|
|
09-25-2003, 01:28 PM
|
#4
|
Moderator
Registered: May 2001
Posts: 29,415
|
oh I get it, it will transfert the root password via the internet.
Yes, but sniffing sshv2 isn't "trivial", it is just best practice to never let root do anything directly on a remote box.
but if I su to root I will be required to enter the password anyway
That's why I said "use sudo to su to the root account" because then you can use the users password instead. If you only need to do a few things as root then it's also best to set up commands for that in sudo, else if you really need a root shell, make sure you export a reasonable timout for the shell. And I don't have to tell you about good vs bad passwds, do I? :-]
|
|
|
09-25-2003, 02:09 PM
|
#5
|
Member
Registered: Sep 2002
Posts: 184
Original Poster
Rep:
|
hey thx man that makes complete sense
always good to have security tips like these 
|
|
|
09-25-2003, 05:19 PM
|
#6
|
Member
Registered: Mar 2002
Location: Edinburgh, Scotland
Distribution: Suse 7.2, Gentoo 1.4, Solaris 9
Posts: 661
Rep:
|
Dude, you should know, you probably already do but hey  , ssh encrypts all traffic involved in the connection before it asks for the password. And if you really want security check out RSA or DSA key authentication. It rocks no more passwords transfered at all, just "ssh remotehost" and your given a prompt on the box. great stuff
It's explained in full, like only IBM know how  here...
http://www-106.ibm.com/developerwork...ry/l-keyc.html
|
|
|
All times are GMT -5. The time now is 09:25 AM.
|
LinuxQuestions.org is looking for people interested in writing
Editorials, Articles, Reviews, and more. If you'd like to contribute
content, let us know.
|
Latest Threads
LQ News
|
|