Web Hosting Forums Web Discussions on Hosting Webmaster forums Web Hosting Forums Domain Name Forums Web Hosting

Old 08-29-2005, 09:17 PM   #1 (permalink)
Hosting Master
Join Date: Aug 2005
Location: New Delhi,India
Posts: 250
incript_services is on a distinguished road
Disable Direct Root Logins

Allowing the root user to login directly is a major security issue, we'll show you how to disable it so you can still login as root but just not directly, reducing the security issue.

This will force a hacker to have to guess 2 seperate passwords to gain root access.
(you do have 2 seperate passwords for admin and root right?)
What happens is you'll first need to login as your admin user in SSH, then switch to the super user with the su command to get root.

We also will be forcing the use of SSH protocol 2, which is a newer, more secure SSH protocol
Just a couple more ways to help your server stay safe from the bad guys. If you're using cPanel make sure you add your admin user to the 'wheel' group so that you will be able to 'su -' to root, otherwise you may lock yourself out of root.

1. SSH into your server as 'admin' and gain root access by su

2. Copy and paste this line to edit the file for SSH logins
pico -w /etc/ssh/sshd_config

3. Find the line
Protocol 2, 1

4. Uncomment it and change it to look like
Protocol 2

5. Next, find the line
PermitRootLogin yes

6. Uncomment it and make it look like PermitRootLogin no

7. Save the file Ctrl+X then Y then enter

8. Now you can restart SSH
/etc/rc.d/init.d/sshd restart

Now, no one will be able to login to root with out first loggin in as admin and 'su -' to root, and you will be forcing the use of a more secure protocol. Just make sure you remember both passwords!
__________________
(Red Pepper)A Microsoft Products Blog with other Technology Updates.
incript_services is offline  
profile.gif home.gif sendpm.gif find.gif Reply With Quote
Old Sponsored Ads   # a.
Ads
Hosting Master
Join Date: Feb 2006
Location: HWHT
Posts: 1100
Ads is on a distinguished road



This message will go away once you are registered. Also, by registering, you will have access to all post topics, communicate privately with other members (PM), respond to polls, upload graphics, and access other special features! Registration is fast, simple and absolutely free so please Click Here to join our Web Hosting community today!
AdsPromoter is online
profile.gif sendpm.gif email.gif find.gif buddy.gif Reply With Quote
Old 09-02-2005, 02:02 PM   #2 (permalink)
Hosting Guru
Join Date: Aug 2005
Posts: 66
DaDevil is on a distinguished road
did u find these somewhere or did u write em? cose there pretty good!
DaDevil is offline  
profile.gif sendpm.gif find.gif Reply With Quote
Old 09-02-2005, 06:23 PM   #3 (permalink)
Hosting Master
Join Date: Aug 2005
Location: New Delhi,India
Posts: 250
incript_services is on a distinguished road
Well the one above is written by me.I have posted a lot of them of which many of them are written by someone else too.As far as credit is concerned i have kept original writers name.

I have collected and written such articles in last few years.So i dont have all the names of writers.People who have wrote those articles can post their claims for sure.
__________________
(Red Pepper)A Microsoft Products Blog with other Technology Updates.
incript_services is offline  
profile.gif home.gif sendpm.gif find.gif Reply With Quote
Old 09-03-2005, 02:02 AM   #4 (permalink)
Hosting Guru
Join Date: Aug 2005
Posts: 66
DaDevil is on a distinguished road
sweet thanx alot. do you manage servers or osmething similar for a living?
DaDevil is offline  
profile.gif sendpm.gif find.gif Reply With Quote
Old 10-04-2005, 10:56 AM   #5 (permalink)
Hosting Master
Join Date: Aug 2005
Location: New Delhi,India
Posts: 250
incript_services is on a distinguished road
Oh yes i was technical engineer for many companies.Looking for some jobs right now.
__________________
(Red Pepper)A Microsoft Products Blog with other Technology Updates.
incript_services is offline  
profile.gif home.gif sendpm.gif find.gif Reply With Quote
Old Sponsored Ads   # a.
Ads
Hosting Master
Join Date: Feb 2006
Location: HWHT
Posts: 1100
Ads is on a distinguished road



This message will go away once you are registered. Also, by registering, you will have access to all post topics, communicate privately with other members (PM), respond to polls, upload graphics, and access other special features! Registration is fast, simple and absolutely free so please Click Here to join our Web Hosting community today!
AdsPromoter is online
profile.gif sendpm.gif email.gif find.gif buddy.gif Reply With Quote
Old 01-14-2008, 09:27 PM   #6 (permalink)
HWHT Addict
Join Date: Nov 2007
Location: India
Posts: 25
IndiaHost is on a distinguished road
Hello incript_services,

Nice tutorial
Disabling direct root logins is a way to to secure your server.
IndiaHost is offline  
profile.gif home.gif sendpm.gif find.gif Reply With Quote
Reply


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


Similar Threads
Thread Thread Starter Forum Replies Last Post
How to Disable Telnet incript_services Dedicated Server Tutorials 5 01-14-2008 08:58 PM
Security for root server technofy_kiran Technical & Security Issues 4 08-23-2006 10:28 AM
Creating a Welcome message for SSH logins incript_services Dedicated Server Tutorials 0 08-29-2005 09:16 PM


All times are GMT. The time now is 04:25 PM.


Powered by vBulletin® Version 3.6.5
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.