Linode Forum
Linode Community Forums
 FAQFAQ    SearchSearch    MembersMembers      Register Register 
 LoginLogin [ Anonymous ] 
Post new topic  Reply to topic
Author Message
PostPosted: Sat Jul 23, 2005 9:56 pm 
Offline
Senior Newbie

Joined: Sat Jul 23, 2005 5:34 pm
Posts: 8
I don't think I like the terminal access. For me to be able to ssh root
to the terminal on 22 is not good. I'm using a different port for ssh on the server, yet I have full control at the terminal. If I can access the terminal in such a manner, so could anyone else.

How do I disable console access to my linode and remove the udp open port, the dhcp server?

Thank you,
rjs


Top
   
 Post subject:
PostPosted: Tue Jul 26, 2005 6:38 pm 
Offline
Senior Member

Joined: Fri Feb 13, 2004 11:30 am
Posts: 140
Location: England, UK
I have another question that's related to this.

I've been using public-key authentication to connect to Lish for some time now. Is it possible to disable the password authentication mechanism for this ourselves? I don't remember seeing an option for it.


Top
   
 Post subject:
PostPosted: Tue Jul 26, 2005 11:30 pm 
Offline
Senior Member
User avatar

Joined: Fri Aug 15, 2003 2:15 pm
Posts: 111
Website: http://fubegra.net/
I haven't seen an option that would allow sshd to disable passwords on a per-user basis. The best thing you can do to keep the bruteforcers out of your console is to pick a strong password for your Linode account.

_________________
Bus error (passengers dumped)


Top
   
 Post subject:
PostPosted: Wed Jul 27, 2005 9:33 am 
Offline
Senior Newbie
User avatar

Joined: Thu May 12, 2005 4:38 pm
Posts: 9
Website: http://www.mylesbraithwaite.com
WLM: mylesbraithwaite@hotmail.com
Yahoo Messenger: mylesab2002
AOL: MylesAB
Location: Toronto, Ontario, Canada
I set my SSH up so I wouldn't be able to login with teh root ID.


Top
   
 Post subject:
PostPosted: Wed Jul 27, 2005 1:08 pm 
Offline
Senior Member

Joined: Thu Aug 28, 2003 12:57 am
Posts: 273
rjp wrote:
I haven't seen an option that would allow sshd to disable passwords on a per-user basis. The best thing you can do to keep the bruteforcers out of your console is to pick a strong password for your Linode account.


From the sshd_config manpage:

Code:
     AllowUsers
             This keyword can be followed by a list of user name patterns,
             separated by spaces.  If specified, login is allowed only for
             user names that match one of the patterns.  '*' and '?' can be
             used as wildcards in the patterns.  Only user names are valid; a
             numerical user ID is not recognized.  By default, login is
             allowed for all users.  If the pattern takes the form USER@HOST
             then USER and HOST are separately checked, restricting logins to
             particular users from particular hosts.


However, if you just want to disallow root access, but allow everyone else, there is an easier option:

Code:
     PermitRootLogin
             Specifies whether root can login using ssh(1).  The argument must
             be "yes", "without-password", "forced-commands-only" or "no".
             The default is "yes".

             If this option is set to "without-password" password authentica-
             tion is disabled for root.  Note that other authentication meth-
             ods (e.g., keyboard-interactive/PAM) may still allow root to
             login using a password.

             If this option is set to "forced-commands-only" root login with
             public key authentication will be allowed, but only if the
             command option has been specified (which may be useful for taking
             remote backups even if root login is normally not allowed).  All
             other authentication methods are disabled for root.

             If this option is set to "no" root is not allowed to login.


Top
   
 Post subject:
PostPosted: Wed Jul 27, 2005 8:37 pm 
Offline
Senior Member
User avatar

Joined: Fri Aug 15, 2003 2:15 pm
Posts: 111
Website: http://fubegra.net/
What I was trying to get at was that you can't tell SSHD to allow public-key logins but disallow password logins on a per-user basis. If you want public-key only, you have to do it for all users.

_________________
Bus error (passengers dumped)


Top
   
Display posts from previous:  Sort by  
Post new topic  Reply to topic


Who is online

Users browsing this forum: No registered users and 1 guest


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum

Search for:
Jump to:  
RSS

Powered by phpBB® Forum Software © phpBB Group