Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

common: SSH only login #90

Open
JGoutin opened this issue May 9, 2024 · 0 comments
Open

common: SSH only login #90

JGoutin opened this issue May 9, 2024 · 0 comments
Assignees
Labels
enhancement New feature or request feature New feature security Related to security hardening

Comments

@JGoutin
Copy link
Owner

JGoutin commented May 9, 2024

The aim is to add an option to allow admin user to login only using SSH with its key (No local console, ...). This is the common behavior on cloud servers.

Requirements:

  • Remove user password (passwd -d username)
  • Ensure user can still sudo once logged, the only solution that doesn't require enabling SSH agent forwarding is to disable password (Edit /etc/sudoers to add username ALL=(ALL) NOPASSWD:ALL at end of file).

Also, it is possible to restrict users allowed to use SSH by editing /etc/ssh/sshd_config and adding AllowUsers username.

@JGoutin JGoutin added enhancement New feature or request security Related to security hardening feature New feature labels May 9, 2024
@JGoutin JGoutin self-assigned this May 9, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request feature New feature security Related to security hardening
Projects
None yet
Development

No branches or pull requests

1 participant