Dotaz: ssh autologin

[johny_b]

ahoj
potreboval by som sprevadzkovat ssh autologin podobne ako to je popisane v tomto clanku: http://nosheep.net/story/password-less-ssh-login/
funguje mi to ale iba pre beznych uzivatelov, pre roota nie.

moja otazka znie: da sa pripojit ako superuzivatel cez ssh bez hesla?

s bezpecnostnymi rizikami som vyrozumeny

alebo vie niekto ako sa pomocou shell scriptu pripojit na druhu masinu a spustit tam nejaky prikaz?

Odpovědi

[Michal Kubeček]

Ano, úplně stejně to funguje i v případě, že je cílovým uživatelem root. Pokud ne, hledejte problém v konfiguraci sshd.

[_]

jinak asi radsi bych doporucil reseni pres ssh keychain nebo ssh agent pokud to aspon trochu bude vyhovovat nez passwordless passpharase. passwordless passphrase jedine spolecne s forced commands jinak to opravdu neni az tak bezpecne.

man sshd_cofnig

PermitRootLogin Specifies whether root can login using ssh(1). The argument must be ``yes'', ``without-password'', ``forced-commands-only'' or ``no''. The default is ``yes''.

If this option is set to ``without-password'' password authentication is disabled for root. Note that other authentication methods (e.g., keyboard-interactive/PAM) may still allow root to login using a pass- word.

If this option is set to ``forced-commands-only'' root login with public key authentication will be allowed, but only if the command option has been specified (which may be useful for taking remote backups even if root login is normally not allowed). All other authentication methods are disabled for root.

If this option is set to ``no'' root is not allowed to login.

[johny_b]

dakujem za odpoved

[Tomáš Janeček]

Pokud ani vyse uvedene reseni nebude fungovat, projdi si /etc/pam.d/sshd