Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 29 Nov 2007 15:07:30 +0700 (ICT)
From:      Olivier Nicole <on@cs.ait.ac.th>
To:        freebsd-questions@freebsd.org
Subject:   Re: Secure remote shell
Message-ID:  <200711290807.lAT87UOo068193@banyan.cs.ait.ac.th>
In-Reply-To: <1d3ed48c0711282112g389407ddyed367561910adfe4@mail.gmail.com> (redchin@gmail.com)
References:  <200711290428.lAT4SOLd065598@banyan.cs.ait.ac.th> <1d3ed48c0711282112g389407ddyed367561910adfe4@mail.gmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help
> ssh using key authentication and sudo configured to allow a certain
> user to run the needed commands and only the needed commands as root.
> rsh? Are you living in a cave? :)

Thanks for the replies.

The original script was written at the cave era, only I am trying to
improve it today.

Would that be better? Using key authentication so ssh needs no
password (and key access limit to limit the client connecting via ssh)
and limiting sudo to run only the mentionned script.

/usr/bin/ssh remote_user@remote_machine.com /usr/local/bin/sudo /usr/local/sbin/remove_user foor_bar

TIA.

Olivier



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200711290807.lAT87UOo068193>