Attachment 705249 Details for Bug 707684 – Diff with PermitRootLogin options

[patch] Diff with PermitRootLogin options

Server_Use.xml.patch (text/plain), 2.08 KB, created by Bryan Sutherland on 2013-03-05 01:16:07 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Bryan Sutherland

Created: 2013-03-05 01:16:07 UTC

Size: 2.08 KB

patch

obsolete

>diff --git a/en-US/Server_Use.xml b/en-US/Server_Use.xml
>index a9dc171..f051c57 100644
>--- a/en-US/Server_Use.xml
>+++ b/en-US/Server_Use.xml
>@@ -11,7 +11,21 @@
> 	<para>Here are the main <filename>/etc/ssh/sshd_config</filename> choices to address:
> 		<simplelist>
> 			<member><command>Protocol 2</command> - Because protocol version 1 contains security vulnerabilities you should make sure that <command>Protocol 2</command> is the only protocol to be used.  To do this make sure that <command>Protocol 2</command> is uncommented and <command>Protocol 1</command> isn't in the configuration.</member>
>-			<member><command>PermitRootLogin</command> - To disable root login via SSH set this to <command>no</command>.</member>
>+			<member><command>PermitRootLogin</command> - Configure remote root login options (options are listed below).</member>
>+			<member>
>+				<simplelist>
>+			 		<member><command>yes</command> Enables access with Password and Public Key</member>
>+			 		<member><command>no</command> Disables all direct remote logins as root</member>
>+			 		<member><command>without-password</command> Allows access with Public Key authentication only</member>
>+			 		<member><command>forced-commands-only</command> Allows access with Public Key authentication and only runs configured commands from <filename>~/.ssh/authorized_keys</filename> (in the form of: <command>allowed-command-name ssh-dsa public-key-string</command>)</member>
>+			 		<member>
>+						<simplelist>
>+			 				<member>Example: <command>command="/bin/ls -l" ssh-rsa AAA...wnp key-comment</command></member>
>+		 				</simplelist>
>+					</member>
>+			 	</member>
>+		 		</simplelist>
>+			</member>
> 			<member><command>PermitEmptyPasswords</command> - To explicitly disallow remote login from accounts with empty passwords set this to <command>no</command>.</member>
> 			<member><command>Banner</command> - Text you want displayed on the screen when someone connects to your server.  This should point to a file.</member>
> 			<member><command>Ciphers</command> - Ciphers that OpenSSH will use.  Example: <command>aes128-ctr,blowfish-cbc</command></member>

Actions: View | Diff

Attachments on bug 707684: 705249