The UNIX and Linux Forums  


Go Back   The UNIX and Linux Forums > Special Forums > Security
.
google unix.com




View Single Post in the UNIX and Linux Forums - Click on the Thread or Permalink to View Entire Thread -->
  #1 (permalink)  
Old 03-31-2009
cpolikowsky cpolikowsky is offline
Registered User
  
 

Join Date: Jun 2008
Posts: 8
Enable SSH for root over certain network connection of a server...is it possible?

Hi - I have a SUSE Enterprise Linux Server V9 that I have an issue with. Policy says that root connectivity via ssh needs to be disabled. So, to do that, I made the following change in the sshd_config section:

# Authentication:

#LoginGraceTime 2m
#PermitRootLogin yes
PermitRootLogin no
#StrictModes yes
#MaxAuthTries 6

The issue is that a utility that the vendor uses uses root to connect via ssh across the two servers in our configuration to collect logging and reporting information. when I disable root login in sshd_config, it breaks their utility. I asked why they would have it run as root and not as some privledged account...but I have not received an answer yet. In our configuration, we have 3 networks (2 are private networks and 1 is connectivity to the corporate network.) My question, is it possible to disable root Login via ssh for some network segments but not others?