Tightening up ssh

[Daniel Gerzo]

Hi Graham,

Sunday, March 26, 2006, 9:52:11 PM, you wrote about:

> Does this mean that there is a way to run ssh, but only allow
> certain users to use it.   My default seems to have been that if
> someone has a username and password they can access ssh (except root
> as "PermitRootLogin no" is the default).   The ssh port seems to be
> the most heavily attacked one on my machine and so I recently took
> to blocking port 22.   My preference would be to enable it to only
> one user and give them an obscure username and strong password. 
> Root is not currently allowed access by default in the setup.

check the AllowUsers and AllowGroups directive in sshd_config(5)

-- 
Best Regards,

 DanGer, ICQ: 261701668  | e-mail protecting at: http://www.2pu.net/
 http://danger.rulez.sk  | proxy list at:        http://www.proxy-web.com/
                         | FreeBSD - The Power to Serve!

[ "Garrick Utley in Allie Sheedy's Frankenstein..."  Tom Servo ]