Tightening up ssh

Graham North northg at shaw.ca
Sun Mar 26 20:11:59 UTC 2006


Hi Daniel
Thank you!  If I read the manpage correctly, invoking AllowUsers 
automatically changes the default behaviour and restricts access to only 
those users specificied.   That fits my needs exactly.   (or at least my 
current perceived needs :--))
Cheers, Graham/


Daniel Gerzo wrote:

>Hi Graham,
>
>Sunday, March 26, 2006, 9:52:11 PM, you wrote about:
>
>  
>
>>Does this mean that there is a way to run ssh, but only allow
>>certain users to use it.   My default seems to have been that if
>>someone has a username and password they can access ssh (except root
>>as "PermitRootLogin no" is the default).   The ssh port seems to be
>>the most heavily attacked one on my machine and so I recently took
>>to blocking port 22.   My preference would be to enable it to only
>>one user and give them an obscure username and strong password. 
>>Root is not currently allowed access by default in the setup.
>>    
>>
>
>check the AllowUsers and AllowGroups directive in sshd_config(5)
>
>  
>

-- 
Kindness can be infectious - try it.

Graham North
Vancouver, BC
www.soleado.ca


-------------- next part --------------
No virus found in this outgoing message.
Checked by AVG Free Edition.
Version: 7.1.385 / Virus Database: 268.3.1/292 - Release Date: 3/24/2006


More information about the freebsd-questions mailing list