UNIX for Beginners Questions & Answers

The remote server which I am talking about is highly important server so our security team doesn't allow any incoming connection (ssh or similar tools ) to this system, so need to avoid that.

But, after considering all other options, I have decided to do scp from remote server to local server & provide input to my script, I was trying to avoid this but for now, this is the easiest & security approved solution.

If at all you guys have any better idea, do share.

So how would you normally connect to the super-secure server? Console only perhaps?

It may well be just best to have a scheduled job on the server that posts the information somewhere. This could be by syslog (as mentioned before) or perhaps it could use ssh/scp to connect out and send them somewhere sensible. You could probably also get the server to HTTP-post a file to a webserver that has a cgi-script and just writes the file somewhere.

One wonders just how sensitive the server must be to not trust the administrator to sign on. You could open SSH incoming but limit access by coding up /etc/security/access.conf (or a file under /etc/security/access.conf.d) to restrict to an approved group. If you are paranoid, you could deny user/password access and force SSH keys to be used and make sure that the private keys matching the approved public keys are not shared.


There will be lots of ways to control SSH access, but we would need to understand the worries that the Security team have about the admin team and how far they would permit you to go.

Would a service account that has one function (to collect this information) be acceptable to them?




I hope that this helps with some options,
Robin