Linux – Block All Users But One From SSH Access

linuxssh

I can currently login to my server via ssh as root. There may be some other users, however, that have ssh access. I want to block out any possible logins except from root. How can I do this?

Thanks.

Best Answer

So you can achieve your stated desire with the AllowUsers directive in your sshd_config file, for example:

$ grep AllowUsers /etc/ssh/sshd_config
AllowUsers root

However I would be wary of using the root account for ssh - consider instead an unprivileged account for normal use, using something like sudo to acquire root privileges only when needed.

Related Solutions

Ssh – Putty: ssh root login to server disabled, how i can setup passwordless access to root on server

You could also change in your sshd configuration file the following line :

PermitRootLogin without-password

This will allow users to login as root but only using something else than password (kerberos tickets, ssh keys etc...)

Disable SSH Password Login – How to Disable SSH Login with Password for Some Users

Try Match in sshd_config:

Match User user1,user2,user3,user4
    PasswordAuthentication no

Or by group:

Match Group users
    PasswordAuthentication no

Or, as mentioned in the comment, by negation:

Match User !root
    PasswordAuthentication no

Note that match is effective "until either another Match line or the end of the file." (the indentation isn't significant)

Best Answer

Related Solutions

Ssh – Putty: ssh root login to server disabled, how i can setup passwordless access to root on server

Disable SSH Password Login – How to Disable SSH Login with Password for Some Users

Related Topic