Re: Tightening up ssh

2006-03-26 Thread Graham North
TED]; questions freebsd Subject: Tightening up ssh Hi Mark: You recently wrote: "Users are encouraged to create single-purpose users with ssh keys and very narrowly defined sudo privileges instead of using root for automated tasks." Does this mean that there is a way to run ssh, but only al

RE: Tightening up ssh

2006-03-26 Thread fbsd_user
p://elibrary.fultus.com/technical/index.jsp?topic=/com.fultus.doc s.software/books/ssh_how-to/cover.html -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Graham North Sent: Sunday, March 26, 2006 2:52 PM To: [EMAIL PROTECTED]; questions freebsd Subject: Tightenin

Re: Tightening up ssh

2006-03-26 Thread Graham North
Hi Daniel Thank you! If I read the manpage correctly, invoking AllowUsers automatically changes the default behaviour and restricts access to only those users specificied. That fits my needs exactly. (or at least my current perceived needs :--)) Cheers, Graham/ Daniel Gerzo wrote: Hi

Re: Tightening up ssh

2006-03-26 Thread Kelly D. Grills
On Sun, Mar 26, 2006 at 11:52:11AM -0800, Graham North wrote: > > Does this mean that there is a way to run ssh, but only allow certain users > to use it. My default seems to have been that if someone has a username > and password they can access ssh (except root as "PermitRootLogin no" is >

Re: Tightening up ssh

2006-03-26 Thread Daniel Gerzo
Hi Graham, Sunday, March 26, 2006, 9:52:11 PM, you wrote about: > Does this mean that there is a way to run ssh, but only allow > certain users to use it. My default seems to have been that if > someone has a username and password they can access ssh (except root > as "PermitRootLogin no" is th

Tightening up ssh

2006-03-26 Thread Graham North
Hi Mark: You recently wrote: "Users are encouraged to create single-purpose users with ssh keys and very narrowly defined sudo privileges instead of using root for automated tasks." Does this mean that there is a way to run ssh, but only allow certain users to use it. My default seems to have