SShd_config and AllowUsers

[m2000]

Hi

Step 3: Begin the installation!

**** SPECIAL NOTICE for non-root ssh logins ****
If logging in as a user other than admin or root (using su to gain root access):

You *must* add "AllowUsers username" to /etc/ssh/sshd_config before you log out from root or you'll lose root on the server forever, and you'll have to format.

Is it meaning: only add followng text:

AllowUsers username

or add these:

AllowUsers root
AllowUsers admin

please help!

 

[wtptrs]

You have to add the name of the user you use to SSH to the server. So for example if your username is 'm2000', add the following:

AllowUsers m2000

and restart the ssh service

 

[m2000]

You have to add the name of the user you use to SSH to the server. So for example if your username is 'm2000', add the following:

AllowUsers m2000

and restart the ssh service

Thanks.
It said:

or you'll lose root on the server forever, and you'll have to format.

it said about losting root user, so i must add only

AllowUsers root

I thought i must put only this code:

AllowUsers username

and it protect root and other users from losting.

 

[wtptrs]

To be able to ssh as root (not recommended) root login needs to be enabled as well in the ssh config. You're better off giving your user (e.g. m2000) sudo access by adding it to /etc/sudoers and then only allowing ssh access to m2000.

 

[Awd]

Just add at the bottem of the sshd.config file

AllowUsers root
AllowUsers m2000

and set

PermitRootLogin no

 

[nando89]

Hi


Is it meaning: only add followng text:

AllowUsers username

or add these:

AllowUsers root
AllowUsers admin

please help!

# adduser m2000

# yum install sudo

# adduser m2000 sudo

# chmod -R 700 /home/m2000

# sudo cp /etc/ssh/sshd_config /etc/ssh/sshd_config.backup

# sudo vim /etc/ssh/sshd_config

By default:

AllowUsers root

Change for:

AllowUsers m2000

PermitRootLogin no

Or from unedited SSH with vim:

# sed -i 's/PermitRootLogin yes/PermitRootLogin no/' /etc/ssh/sshd_config

# sudo systemctl restart sshd.service

Restrict the root user for more security:

# sudo echo "tty1" > /etc/securetty

Remember to add the user to this group so that it ends up working well. Use usermod -a -G. He also creates the group with: groupadd.

More:
https://www.ssh.com/ssh/sshd_config/