Enable SSH for root over certain network connection of a server...is it possible?
Hi - I have a SUSE Enterprise Linux Server V9 that I have an issue with. Policy says that root connectivity via ssh needs to be disabled. So, to do that, I made the following change in the sshd_config section:
The issue is that a utility that the vendor uses uses root to connect via ssh across the two servers in our configuration to collect logging and reporting information. when I disable root login in sshd_config, it breaks their utility. I asked why they would have it run as root and not as some privledged account...but I have not received an answer yet. In our configuration, we have 3 networks (2 are private networks and 1 is connectivity to the corporate network.) My question, is it possible to disable root Login via ssh for some network segments but not others?
Last edited by Don Cragun; 10-05-2016 at 07:32 PM..
Reason: Add CODE tags.
Ok Time warner cable / voip modem feeding Cisco PIX 501 Wan port from PIX 501 LAN port to WAN port on Linksys wrt54GL wireless router.
so
-->Modem-->PIX 501-->WRT54GL-->Linux Server, wireless desktop, wireless laptop (2), Wireless MAC Pro, Wireless Apple TV, Wireless printer.
my... (0 Replies)
hello i have a ubuntu ssh server that i can acess from any of my comnputers but only if they are on the same wireless network as the server. i tested trhis my tehtehring my samsung blackjack to my windows partition and installing openssh to windows it works when windows is on the wireless but no... (1 Reply)
Hi ,
when i try to passwordless connection login in ssh through putty, i am getting the "Server unexpectedly closed network connection" error.i have already finished the public and private key settings for the particular user.
thanks
MaroV (1 Reply)
I have two servers, the first server is a sun x4170 and i need transfer zpool root (with all system) that this moment is mirror to new server x4200 , i don't now how can i clone , copy o migrate rpool (root) in new server by network. The two servers are different sites.
Do i need jumpstart or... (0 Replies)
Solaris 10 Server refuse to connect :wall:
fork: Resource temporarily unavailable , server unexpectedly unavailable network connection , refuse error, disconnect message, fatal error type2, (protocol error type2)
Issue has been resolved after taken few steps :b:
First of all need to check... (1 Reply)
Hi
I hope someone can spot what is wrong with this ssh connection as it has me baffled.
I am trying to set up a remote ssh connection (passwordless) to a remote 'server', (Ubuntu laptop at home).
I have tried these steps with rsa and dsa key types, (currently dsa) -
1) ssh-keygen... (4 Replies)
Hello,
I ahve written a shell script which is doing ssh from UNIX Sun Os to multiple Linux servers one by one using loop. but after first iteration the script is getting exit. Rather it should connect to other linux server as well one by one. Please refer belwo code.
#!/bin/ksh
#set -x... (2 Replies)
Can ssh to server. Asks for password.
Then seems to time out and close the connection. Any ideas?
---------- Post updated at 09:30 AM ---------- Previous update was at 07:51 AM ----------
Here is output from ssh -vvv -l user <IPaddress>
debug3: packet_send2: adding 64 (len 59 padlen 5... (4 Replies)
Discussion started by: psychocandy
4 Replies
LEARN ABOUT CENTOS
ssh-ldap-helper
SSH-LDAP-HELPER(8) BSD System Manager's Manual SSH-LDAP-HELPER(8)NAME
ssh-ldap-helper -- sshd helper program for ldap support
SYNOPSIS
ssh-ldap-helper [-devw] [-f file] [-s user]
DESCRIPTION
ssh-ldap-helper is used by sshd(1) to access keys provided by an LDAP. ssh-ldap-helper is disabled by default and can only be enabled in the
sshd configuration file /etc/ssh/sshd_config by setting AuthorizedKeysCommand to ``/usr/libexec/openssh/ssh-ldap-wrapper''.
ssh-ldap-helper is not intended to be invoked by the user, but from sshd(8) via ssh-ldap-wrapper.
The options are as follows:
-d Set the debug mode; ssh-ldap-helper prints all logs to stderr instead of syslog.
-e Implies -w; ssh-ldap-helper halts if it encounters an unknown item in the ldap.conf file.
-f ssh-ldap-helper uses this file as the ldap configuration file instead of /etc/ssh/ldap.conf (default).
-s ssh-ldap-helper prints out the user's keys to stdout and exits.
-v Implies -d; increases verbosity.
-w ssh-ldap-helper writes warnings about unknown items in the ldap.conf configuration file.
SEE ALSO sshd(8), sshd_config(5), ssh-ldap.conf(5),
HISTORY
ssh-ldap-helper first appeared in OpenSSH 5.5 + PKA-LDAP .
AUTHORS
Jan F. Chadima <jchadima@redhat.com>
BSD April 29, 2010 BSD