is there an easy way to disable ssh for everyone but root?

abefroman · 11-26-2009, 07:13 PM

Is there an easy way to disable ssh for everyone but root?

splunk · 11-26-2009, 11:46 PM

Yes.

But it is highly recommended to disable logins by the root user.

Instead, you should login as a normal user and then use su or sudo to become root.

unSpawn · 11-27-2009, 12:28 AM

I agree. Why would you be asking for this?

abefroman · 11-27-2009, 08:52 AM

Quote:

Originally Posted by unSpawn

I agree. Why would you be asking for this?

I have several servers that write to one particular server to do backups, and I want to allow them access only on day a month, and then disable it.

I have a pretty strong root password and brute force detector, and ACL, so I'm not too worried about root login being allowed.

fpmurphy · 11-27-2009, 10:24 AM

Sure. Look at the AllowUsers option in sshd_config.

abefroman · 11-27-2009, 10:31 AM

Quote:

Originally Posted by fpmurphy

Sure. Look at the AllowUsers option in sshd_config.

Thanks!

I have the server offline now, is this correct:

Code:

AllowUsers root

to allow root only

Code:

#AllowUsers root

and then comment that line to allow everyone?