Server :: Prevent Ssh Connection For A User?
Jun 9, 2009I have a user name is nicole. I want to prevent ssh connection for this user. How can i prevent ssh connection for this user?
View 9 RepliesI have a user name is nicole. I want to prevent ssh connection for this user. How can i prevent ssh connection for this user?
View 9 Replieshow to prevent same user from ssh to multiple linux server at a same time , anyone of you have the script or how to do that ?
View 16 Replies View RelatedFormerly I add a user to the file "/etc/ssh/sshd_config" and run service sshd reload, so that this user can login.Now the user is gone and I have to block this user. I did as follow:1. Take out the user name from "/etc/ssh/sshd_config" and run 'service sshd reload' again. But this user can still log in.
View 3 Replies View Relatedrecently i rent a xen vps intended to setup a PPTPD vpn server for me and my friends. so we can by-pass the great firewall in china and get back on ....., facebook and stuff. i have already setup the server and i can connect to it without any problem. but i still want to do some further configuration the server:
1. i want to limit the bandwidth to 400k/s per connection.
2. i also want to limit the max connection per user a/c
i have some thoughts on the 2nd requirement. in the user configuration file of /etc/ppp/chap-secret, you can specify the range of ip the user can get, does it limit the max connection per user a/c? or they can connect anyway, just every now and then a box pop up says conflict in IP address?
what if the root user by mistakenly stops/starts any service and tried to remove those traces from the log files and save those log files. Then how can we ensure that our log file is trusted. Is there any way where even the root(superuser) also cant edit/modify the contents of the /var/log/* files.
View 2 Replies View Relatedi searched the forum about this subject, i found many post but nothing useful. i also wonder why a normal user is not prompted to authenticate as root to perform these tasks. i thought the file /etc/sudoers but i don't think this is the point. i tried the group "shutdown" but does not exist. i read that this is expected in ubuntu server so it should exist even in the desktop version, i guess.
View 3 Replies View RelatedI have, for example, a folder called "MyFolder" and it contains 3 files: MyFile1, MyFile2, MyFile3. The only file that I do NOT want a particular user/group to even see that it exists is, for exmple, MyFile2.So, when they do a directory listing on MyFolder, they should only see MyFile1 and MyFile3. How can this be done in Linux? The important thing is that it is not just preventing them from "executing" MyFile2, but to prevent them from even knowing that it exists by not including it in a directory listing.This is a simpified example using one file, but in reality, I have lots of files and some of those that I want to block are also subfolders.It is very important for me to hide the existence of certain files/folders when the user does a directory listing. It's also important that the files stay in their current folder (that is, I can't use a workaround which requires moving all the files into a separate folder and then securing that folder).
View 4 Replies View RelatedCode:- '-K': Allow users to resume and upload files, but *NOT* to delete or renamethemDirectories can be removed, but only if they are empty. However,overwriting existing files is still allowed (to support upload resume) . Ifyou want to disable this too, add -r (--autorename) .This is pretty much what I want to do, but I only want this done to ONE user on the server. I have many user accounts, but only one of them I want to prevent users from issuing the "delete" command and deleting everything.
View 2 Replies View RelatedIs there a way to prevent ubuntu/gnome to show the user name(s) at the login screen?
Only asking "username" and not "login as"?
I'm using Gnome and I'd like to still have the ability to reboot/shutdown from one particular account as well as root. How would I modify the chmod command to add this ability?Also, I have a few users who just will hold the power button in to shutdown the machine. How can I keep them from doing this?// Pruned from the vintage 2007 Prevent a non-root user from shutting down, rebooting or suspend the system thread. Please create new threads instead of resurrecting ancient ones.
View 2 Replies View RelatedLinux printing appeared to be working fine up until yesterday. Today typing lpq gives the following: lpq Printer 'sdst@other.domain' - cannot open connection - Connection timed out Make sure LPD server is running on the server
The /etc/cups/printers.conf file is properly set, the printers appear in localhost:631 and they are printing test pages. However, all command line print commands seem to be trying to print to sdst@other.domain I don't know why printers.conf is being ignored and why and how sdst@other.domain was added. Seems like it might have been auto-discovered?
# dit: sdst@other.domain was mentioned in /usr/local/etc/lpd.conf I'm not sure why lpd.conf is being used instead of /etc/cups/printers.conf
I wanted to know is there any way to prevent fork bomb on a server or understand who did it and how did it I mean how to track reference of fork bomb and find out how does it occur ?
View 3 Replies View RelatedI'm presently writing software to keep my system time from drifting, it uses an external clock device.To verify it's accuracy I'm running ntpd as a server, and have another server monior the first as a client. This allows me to compare the offset with other 'valid' time servers.The problem is that the monitoring client keeps synchronising with my development server. How can I configure either the dev. server or the client so that it's time won't be selected as a good time source?The ntp.conf on the dev. server looks like:
Code:
server 127.127.1.0 # local clock
fudge 127.127.1.0 stratum 10
[code]...
I'm a frequent user of the shared connection feature of SSH. Usually i have two or three connections open at the same time through the connection sharing feature, but sometimes when i try to start another i get the message "Shared connection to <server< closed". All the connection that are established through the connection sharing feature are still active and not closed, but when i try to create a new one i get that message.. i've even got that message when i have only had two connections through the shared connection feature.
I've tried to search google but it doesnt seem like anyone else has had the same kind of problem, does someone know why i sometimes get this error ?
I wish to create aliases to log into a server and go to a specific folder. For example, I have two aliases:
Code:
alias REP1='ssh me@server cd /REP1'
alias REP2='ssh me@server cd /REP2'
and of course, I'm disconnected after cd commands. I found no ssh option which prevents this disconnection to occur. I also tried the following trick:
Code:
ssh me@server "cd /REP; bash -i"
but it left me with a crappy shell (no color, directions keys printing ^]]A, ...)
I have a headless server, and I want to prevent GDM 2.30 from starting the graphical login on the console screen. As I use XDMCP, I still need GDM running on the server... With previous versions of GDM, I was doing that through gdmsetup, which ended with these lines in /etc/custom.conf :
Code:
[servers]
0=inactive
but it seems that it's not working anymore with 2.30...
I think this is the right place to ask my question so I'll just go ahead. Where I live we have frequent power anomalies such as outage and why I would describe as power resets resulting in power being cut and restored in a very fast delay, resulting in all electrical equipment in my house to reset and all computers to improperly shutdown and reboot. I don't know how many times my beloved Linux server was reset like this and every time reiser fs has to replay transactions and so far I've been lucky I did not lose any hdd or other components but I think this will happen sooner than later.
What I am searching for is a device that would protect my server, scanner, router and a few other small devices from power surges and anomalies that would result in hardware and equipment damage. What I also want from that device is the capability to continue powering the devices until they properly shutdown. I think a ups is what I am looking for but all models that I've seen are priced $400 up and that's over my budget.
What I also want is the capability to announce to the server that the device is running on batteries and that the server can initiate it's normal shutdown procedure.
Is there a way to prevent users of an OpenVPN service from accessing restricted sites? I know this can be done through a proxy server but through a VPN there seems to be no way of preventing traffic from accessing porn sites or other as the traffic is encrypted. I am using a VPN in the same fashion as a proxy server except that the VPN is necessary because some video sites use rtmp on port 1935, which a proxy server cannot route.
View 7 Replies View RelatedWe have the following server at collocation: [URL]
Provider's technicians were working for 3 hrs but finally were unable to set up hardware RAID1 on it.
What could prevent them from doing it? Is it difficult to set up RAID1? It is mentionned as basic function in specifications.
They said debian not booting after raid configured...
I�m looking into preventing the samba messages from appearing in the system log (/var/log/messages).I added syslog = 0 to smb.conf and reloaded the config but messages are still appearing�suppress logging or reconfiguremba such that the �nmbd� and �winbindd� messages do not appear in /var/log/messages
View 4 Replies View RelatedOne of my ubuntu 10.04 boxes starts apache2 server automatically at boot. I know from the output of the command:
Code:
sudo /etc/init.d/apache2 status
I can't remember even setting that up, and I don't think it does so by default, since my other box in fact does not even have apache2 server installed. I can stop the server once I login, but is there a way to stop it from automatically starting the server, or even better, completely uninstall the daemon. I tried
Code:
sudo apt-get remove apache2
but that does not work. I guess the daemon is part of some bigger package.
Prevent flash from running threads in high priority
View 6 Replies View RelatedI am running an Ubuntu Server on a VirtualBox VM running on my windows machine. So I've created a self-signed certificate using the following tutorial: [URL]
From this tutorial I'm left with 3 files:
server.key
server.csr
server.crt
Then I found this very similar tutorial that has an extra bit on installing the certificates in apache: [URL] So I followed it's instructions which boil down to this:
[Code]...
So I'm thinking this should work now. However in Chrome I get: SSL connection error Unable to make a secure connection to the server. This may be a problem with the server, or it may be requiring a client authentication certificate that you don't have. Error 107 (net::ERR_SSL_PROTOCOL_ERROR): SSL protocol error. IE8 gives me a typical "Internet Explorer cannot display the webpage" Note that [URL] fails while [URL] works fine, so it's definitely something in my ssl setup I'm thinking.
vsftpd not working on my CentOS system. I tried logging in using FileZilla but the error message was: Connection attempt failed with "ECONNREFUSED - Connection refused by server".
View 7 Replies View RelatedI have a question that i want to make a normal user to execute the commands which the root user is able to execute, say if i have a user named siru and when i logged in using siru i cannot run commands like tracert,nmap@loccalhost and all but i can run when i have logged into root account so my question is how to make siru to run the command tracert,nmap@localhost.I have even edited the .bash_profile of siru's home directory from
# .bash_profile
# Get the aliases and functions
if [ -f ~/.bashrc ]; then
[code]...
Apache is run as www as is all the files/folders. People are uploading via FTP, scp, so the problem is if I chmod so everyone can read, then rsync as a user it works until new files are added which then my ; if rsync fails with a permission denied. Now I can add a chmod in the script so everyone can read, but since www can already read, I figured I would just change my script to use www. I added the ssh key to his authorized_keys file, but when I try to just ssh in I see this in the secure file;
server sshd[29539]: User www not allowed because account is locked
sshd[29539]: Failed none for invalid user www from ip port 54983 ssh2
Now I read a few places already saying I need to add a password to the account, etc. but before I jump and try all I read, 1st major one, will this now break apache? Will this affect any startup things, etc. and .... will that unlock that user for ssh in or is there another preferred method?
I can make a connection to the vpn server, the connection starts, but nothing happens! My IP address remains the same as previous! There is nothing added to my Knetworkmanager, I'm a beginner I should use a pcf file for my vpn connection. I use it properly, I'm sure because the connection starts and an icon is added to my panel and remains until I disconnect.
I checked it via ifconfig -a, the last part (which is for vpn) is:
Code:
tun0 Link encap:UNSPEC HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
inet addr:141.213.169.76 P-t-P:141.213.169.76 Mask:255.255.255.255
UP POINTOPOINT RUNNING NOARP MULTICAST MTU:1390 Metric:1
RX packets:4 errors:0 dropped:0 overruns:0 frame:0
I installed SSH-keygen dependancies for a /chroot user.
I can now execute ssh-keygen from the /chroot user BUT I receive a message PRNG is not seeded.
When I do it from any of the users that are not /chroot users, it works fine.
I'm looking for a way to limit:
-memory usage (mb/user)
-cpu usage
-processes (amount and no same process multiply)
-connections (amount of connections (to specific host))
-bandwidth (kbps/user and even owerall for regular users)
-disk usage
-available commands
For every other users than me/root.
get the steps for LDAP user to NIS user migration?
View 1 Replies View Related