[NBLUG/talk] Root and SSH questions..

Eric Eisenhart eric at nblug.org
Thu Sep 18 13:43:00 PDT 2003


On Thu, Sep 18, 2003 at 09:57:42AM -0700, E Frank Ball wrote:
> If the user only logs in remotely, then you can replace his password in
> the /etc/passwd file with !!.
> 
> I don't know how to configure ssh to do it.

Killing the password is the most thorough way by far.

If you still needed to have a password for some other service on the
machine, you can configure sshd to allow or deny specific users by use of
any of:
AllowGroups
AllowUsers
DenyGroups
DenyUsers

The default is allowing all users and groups and deny none.  You can specify
a specific user (or any member of a given group) with the Deny keywords, or
even better, limit the allowed users to a specific list of users, either by
listing them in sshd_config or by listing them in a group.
-- 
Eric Eisenhart
NBLUG Co-Founder & Director-At-Large
The North Bay Linux Users Group
http://nblug.org/
eric at nblug.org, IRC: Freiheit at freenode, AIM: falschfreiheit, ICQ: 48217244



More information about the talk mailing list