Re: Locking down a guest account - need help.

2001-08-24 Thread Peter Cordes
On Fri, Aug 03, 2001 at 12:46:10PM -0500, David Ehle wrote: > > Howdy all, > >Not debian specific, but this is the best batch of security minds I > have access too so I figured I'd see if this interests anyone. > > I need to set up some Xterminal replacemnets - linux boxes that will > most

Re: Locking down a guest account - need help.

2001-08-23 Thread Peter Cordes
On Fri, Aug 03, 2001 at 12:46:10PM -0500, David Ehle wrote: > > Howdy all, > >Not debian specific, but this is the best batch of security minds I > have access too so I figured I'd see if this interests anyone. > > I need to set up some Xterminal replacemnets - linux boxes that will > mos

Re: Locking down a guest account - need help.

2001-08-06 Thread Mike Fedyk
On Sat, Aug 04, 2001 at 12:30:20AM +0200, Tobias wrote: > Hello! > > you can disable password login in sshd and only run ssh with public > key authentication, just don't forget to put a root owned non-writable > folder or file called ".ssh" and ".ssh2" in the accounts you do not wish > people to l

Re: Locking down a guest account - need help.

2001-08-06 Thread Mike Fedyk
On Sat, Aug 04, 2001 at 12:30:20AM +0200, Tobias wrote: > Hello! > > you can disable password login in sshd and only run ssh with public > key authentication, just don't forget to put a root owned non-writable > folder or file called ".ssh" and ".ssh2" in the accounts you do not wish > people to

Re: Locking down a guest account - need help.

2001-08-06 Thread Mike Renfro
On Fri, Aug 03, 2001 at 12:46:10PM -0500, David Ehle wrote: > 1. How to dissallow network connections to this guest account? I don't > want anyone ssh'ing in, but I still want to be able to remotely administer > the machines. man sshd -- DenyUsers This keyword can be followed

Re: Locking down a guest account - need help.

2001-08-06 Thread Mike Renfro
On Fri, Aug 03, 2001 at 12:46:10PM -0500, David Ehle wrote: > 1. How to dissallow network connections to this guest account? I don't > want anyone ssh'ing in, but I still want to be able to remotely administer > the machines. man sshd -- DenyUsers This keyword can be followed

Re: Locking down a guest account - need help.

2001-08-06 Thread Eli Boaz
On Sat, Aug 04, 2001 at 12:30:20AM +0200, Tobias wrote: > Hello! > > you can disable password login in sshd and only run ssh with public > key authentication, just don't forget to put a root owned non-writable > folder or file called ".ssh" and ".ssh2" in the accounts you do not wish > people to l

Re: Locking down a guest account - need help.

2001-08-05 Thread Eli Boaz
On Sat, Aug 04, 2001 at 12:30:20AM +0200, Tobias wrote: > Hello! > > you can disable password login in sshd and only run ssh with public > key authentication, just don't forget to put a root owned non-writable > folder or file called ".ssh" and ".ssh2" in the accounts you do not wish > people to

Re: Locking down a guest account - need help.

2001-08-03 Thread Brandon High
On Fri, Aug 03, 2001 at 03:38:28PM -0700, Vineet Kumar wrote: > > * David Ehle ([EMAIL PROTECTED]) [010803 14:53]: > > Thanks Andrew, Thanks Jim. > > > >I'll layer them on and sleep better tonight ;). > > > > Stopping the middle button menu behavior is still causing me to pull my > > hair ou

Re: Locking down a guest account - need help.

2001-08-03 Thread Vineet Kumar
* David Ehle ([EMAIL PROTECTED]) [010803 14:53]: > Thanks Andrew, Thanks Jim. > >I'll layer them on and sleep better tonight ;). > > Stopping the middle button menu behavior is still causing me to pull my > hair out though. Tried changing the behavior of the middle button in the > /enlighte

Re: Locking down a guest account - need help.

2001-08-03 Thread Tobias
Hello! you can disable password login in sshd and only run ssh with public key authentication, just don't forget to put a root owned non-writable folder or file called ".ssh" and ".ssh2" in the accounts you do not wish people to log in to. And I agree with Jim Breton about locking down PAM as muc

Re: Locking down a guest account - need help.

2001-08-03 Thread Jim Breton
On Fri, Aug 03, 2001 at 08:09:25PM +, Jim Breton wrote: > You can also disable access with PAM, using the "sshd" pam control file. > Just use pam_deny.so to deny authentication. /me pops foot out of mouth When I wrote that I was not considering your previous statement of needing to still

Re: Locking down a guest account - need help.

2001-08-03 Thread Vineet Kumar
* David Ehle ([EMAIL PROTECTED]) [010803 14:53]: > Thanks Andrew, Thanks Jim. > >I'll layer them on and sleep better tonight ;). > > Stopping the middle button menu behavior is still causing me to pull my > hair out though. Tried changing the behavior of the middle button in the > /enlight

Re: Locking down a guest account - need help.

2001-08-03 Thread David Ehle
Thanks Andrew, Thanks Jim. I'll layer them on and sleep better tonight ;). Stopping the middle button menu behavior is still causing me to pull my hair out though. Tried changing the behavior of the middle button in the /enlightenment/keybind.cfg file - both global and local version, but it d

Re: Locking down a guest account - need help.

2001-08-03 Thread Jim Breton
On Fri, Aug 03, 2001 at 01:56:26PM -0400, Andrew Lattis wrote: > 1. Check the openssh man page for AllowGroups and AllowUsers, both allow you > to > specify users that are allowed to login, everyone else is denied. You can also disable access with PAM, using the "sshd" pam control file. Just use

Re: Locking down a guest account - need help.

2001-08-03 Thread Tobias
Hello! you can disable password login in sshd and only run ssh with public key authentication, just don't forget to put a root owned non-writable folder or file called ".ssh" and ".ssh2" in the accounts you do not wish people to log in to. And I agree with Jim Breton about locking down PAM as mu

Re: Locking down a guest account - need help.

2001-08-03 Thread Andrew Lattis
On Fri, 03 Aug 2001 13:46:10 David Ehle wrote: > > Howdy all, > >Not debian specific, but this is the best batch of security minds I > have access too so I figured I'd see if this interests anyone. > > I need to set up some Xterminal replacemnets - linux boxes that will > mostly only be ru

Re: Locking down a guest account - need help.

2001-08-03 Thread Jim Breton
On Fri, Aug 03, 2001 at 01:56:26PM -0400, Andrew Lattis wrote: > 1. Check the openssh man page for AllowGroups and AllowUsers, both allow you to > specify users that are allowed to login, everyone else is denied. You can also disable access with PAM, using the "sshd" pam control file. Just use pa

Locking down a guest account - need help.

2001-08-03 Thread David Ehle
Howdy all, Not debian specific, but this is the best batch of security minds I have access too so I figured I'd see if this interests anyone. I need to set up some Xterminal replacemnets - linux boxes that will mostly only be running netscape and ssh. They are going to be used for visiti

Locking down a guest account - need help.

2001-08-03 Thread David Ehle
Howdy all, Not debian specific, but this is the best batch of security minds I have access too so I figured I'd see if this interests anyone. I need to set up some Xterminal replacemnets - linux boxes that will mostly only be running netscape and ssh. They are going to be used for visit