Re: port forwarding timeouts

Richard E. Silverman sez:
"JB" == Jeff B <jbeard_No-SpAm_1185@xxxxxxxxxxxx> writes:

JB> fundament concept: *never* allow root access remotely.

As it happens, I'm fairly conversant with fundamental concepts of Unix
systems administration, as well as SSH -- which is related to the number
of times in the past few months that I've corrected your repeated errors
in advice to people on SSH. Which I also note that you mostly ignore.

Thanks for your concern, though.

JB> If it's truely necessary, login as joe_user and then use SU or SUDO

Automated jobs frequently require remote root access, and can't type in a
password to su or sudo. You can make specific NOPASSWD sudo entries for
those jobs, but a lot of people are uncomfortable with that.

Also, there are some handy GUI apps out there and X forwarding
with su is a major pain.

Dima
--
Relativity, Uncertainty, Incompleteness, Undecidability: choose any four
.

Relevant Pages

  • Re: port forwarding timeouts
    ... I'm fairly conversant with fundamental concepts of Unix ... systems administration, as well as SSH ... login as joe_user and then use SU or SUDO ...
    (comp.security.ssh)
  • Re: port forwarding timeouts
    ... systems administration, as well as SSH -- which is related to the number ... in advice to people on SSH. ... login as joe_user and then use SU or SUDO ... those jobs, but a lot of people are uncomfortable with that. ...
    (comp.security.ssh)
  • Forcing new password at login (w/o requiring an old password) (sudo related)
    ... this isn't an SSH problem. ... and taking that technique a little further is stumping me. ... sudo access to these users (assuming I want to avoid password-less sudo, ... grant password-free passwd capability until that NOPASSWD entry ...
    (comp.security.ssh)
  • Re: Problems with Sudo
    ... you can't sudo to root. ... SSH is generally allowed, all limitations should still apply including ... secure, the internet is a very dangerous place. ... allowing someone to break out of a chroot jail by simply logging back ...
    (Ubuntu)
  • SSPI forward/delegate credentials
    ... The next what I wanted to do was using the tgt for a unix service (ssh). ... the authentication part to use the sspi credentials. ... Using the ssh client in unix my credential going to be forwarded. ...
    (microsoft.public.platformsdk.security)