Re: ssh root login
On Thu, Oct 23, 2014 at 03:03:28PM +0200, Holger Levsen wrote:
> Hi Giorgio,
>
> On Donnerstag, 23. Oktober 2014, Giorgio Pioda wrote:
> > after all the SSLv3 problems I disabled also root ssh login
> > on the tjener. But this has blocked the backup system, so I had to
> > restore the root login.
> > Would it be wise to improve this behaviour ?
>
> you can lock down ssh keys to allow only to execute certain commands and only
> from certain IP addresses, etc. - "restrict authorized_leys" should be a good
> search term.
>
> I think the really important part if to only allow logins with ssh keys - not
> passwords.
>
Yes, but the web admin of slbackup need full access I guess
Regards
--
Giorgio Pioda - Sysadmin SPSE-Tenero
Cell +41 79 629 20 63
Tel +41 58 468 62 48
Fax +41 58 468 61 98
Reply to: