Hello Linux Guru's

I have a dedicated server, i am using username Root to access my server true ssh.

as i researched, there is one more account, except root

how can i see how many accounts are in my ssh accessing my server, i want to know all accounts and disable them + want to delete them...


Please, if there is any command to list all accounts. so i leave only root account and disable all other accounts.


waiting...


Regards
Zhanka

Checking
http://usalug.org/phpBB2/viewtopic.p...dd9269a61e4e2e
you can edit /etc/ssh/sshd_config and add:
AllowUsers <SomeUserName>
to restrict access only from those users.

Best Regards,
Mustafa Elsheikh
la République du Mustafa Elsheikh

thanks,
should i add this line:

AllowUsers root

like this ? if i am correct, please confirm, as i did add this, still when i use username: admin, it asks for password, it means others can login.

issue also, even if it asks for password, it doesn't mean they can login.
lists all users. some of them can login to Linux in general and others cannot.

also, I found some post here interesting:
read it at: HowTo sshd deny all users except for one?

Best Regards,
Mustafa Elsheikh
la République du Mustafa Elsheikh

Allowing root to log into ssh is not the best idea from a security standpoint. It would be better to log in as a regular user and set it up so that user has appropriate sudo privledges to do what is needed. That way you can limit what can be done remotely to the few things that are likely to need to be done.

Also many brute force ssh attacks are looking for root accounts. So not allowing root at all raises the bar a bit as they then need to figure out what user to try to gain access as. (of course stay away from names like admin, guest, sysop, etc).

it is a bit more work (not that much really), but gives you much finer contorl over what the user can and can not do. Also sudo can be set up to log all sudo'd commands which can also help security wise.

hope this helps
Freemor

Thanks,

AllowUsers root
AllowGroups root

worked, i added this and restarted my dedicated server, now i can login with root only, not with my other accounts.

THANKS ONCE AGAIN DUDE

Good idea Freemor!
Cleaver!

thanks dude, will give a try!

Hey,
From a security point of view, not allowing root is a great idea.
I also run a dedicated ssh server just for a personal use shell when im out and about.
Within a week of setting it up I checked /var/log/auth.log and had over ten thousand Illegal login attempts, from plenty of different addresses. I found an easy fix, in the sshd or ssh config file there is an option to change the default port that openssh runs on.
I changed it to 23, and now 99% of the login attempts are from a telnet client :-P
But for some reason they only try once instead of a thousand times, which is nice, just enough info to get their IP and do some friendly research. hehe

Anyway to see whos been sniffing around ur SSH,
try looking at /var/log/auth.log
I think you will be surprised =)
Good Luck!
Luke