Re: need an efficient and secure sshd_config



That prompt is being shown by the SSH client. You could write a script
to accept the password. Or implement a client yourself.


On Thursday, July 16, 2009, J. Bakshi <bakshi12@xxxxxxxxx> wrote:
On Wed, 15 Jul 2009 13:01:15 -0400
Greg Wooledge <wooledg@xxxxxxxxxxx> wrote:

On Tue, Jul 14, 2009 at 11:04:45AM -0700, Robert Hajime Lanning wrote:
The idle logout, isn't sshd.  It is the shell.  Look into the
"autologout" environment veriable for bash.

Many NAT firewalls also have a connection timeout that affects ssh
users.  Setting the ServerAliveInternal (or the corresponding server
configuration option) allows persistent ssh connections through such
firewalls, which would otherwise expire idle connections.

matteo filippetto <matteo.filippetto@xxxxxxxxx> wrote:
I need the configuration which actually suppress the hostname and
the domain/IP on client side. client will only be prompted for
password.

If I'm reading this right, you want the client to be able to reach
only one server.  E.g., user types "go" and the "go" script runs
ssh someuser@xxxxxxxxx (which is a trivial script to write).

No server configuration option would be necessary or useful in that
case.

If you mean something else by "suppress the hostname and the domain/IP
on client side", then I don't understand the question.

Ok here is an example. Say there is a Host configuration as myserver in my .ssh/config file. Now if I do


```````````
# ssh myserver

username@xxxxxxxxxxxxx's password:
```````````````````

I like to suppress the information username@xxxxxxxxxxxxx and it should prompt only the password:
I like to know the configuration for both server side and clinet side to suppress the information; if any.

thanks


--
warm regards,
Akash Mahajan
----------------------------------------------------------
Security Consultant, (Web / Networks /
Servers / IT/ Virtualization)
Founder Headstart Network Foundation
----------------------------------------------------------
http://www.linkedin.com/in/akashm
http://network.headstart.in
----------------------------------------------------------



Relevant Pages

  • Re: OpenVPN server mode usage?
    ... But an openvpn configuration shouldn't be depending upon dynamic dns. ... Have your dynamic IP client contact your server. ...
    (Debian-User)
  • Re: Explanation of SSH
    ... I am still unclear on how SSH works exactly. ... Client issues SSH command and names server ... "Shopper" says "server sends back its public host and server keys ... Surely there is only one public key it sends ...
    (comp.security.ssh)
  • Re: ssh security question
    ... In my case - the client is a windows client and the ssh is embedded into the windows nx client. ... Is there any reason I can't run ssh-keygen on the server and copy the private key to the client - and the public key to the "authorised" directory? ... sniffer can catch your passwords, and it would make it trivial to log in ...
    (SSH)
  • Re: Trouble with X11 over SSH on Mandriva 2010.0
    ... If next clean install/update causes ssh to break, ... installed the sshd daemon/service package (OpenSSH Server) on the server. ... correct values for client and server. ...
    (comp.os.linux.networking)
  • Problem joining Windows domain from remote VPN/PPTP box
    ... server OK with administrator rights (configured via Routing and Remote ... On client there exists static route for remote network that points to ... following information can help you troubleshoot your DNS configuration. ...
    (microsoft.public.windows.server.active_directory)