Home / server / Questions / 273521
Accepted
gAMBOOKa
Asked: 2011-05-26 01:19:27 +0800 CST

Putty: ssh root login to server disabled, how i can setup passwordless access to root on server?

  • 772

For added security, we've disabled root login to server via ssh. We have a special ssh account that users need to login as, and then su as root in they require root access.

How can we setup passwordless logins using putty in this situation? I've setup passwordless login to the special ssh account, but we still need a password when we su as root.

If I'm not clear, feel free to ask me to clarify.

authentication ssh sudo putty public-key

3 Answers

  1. Edit /etc/sudoers via the visudo command.

    Add

    specialsshaccount       ALL=(ALL)       NOPASSWD: ALL

    Tip: http://www.sans.org/reading_room/whitepapers/basics/administration-shared-accounts_1271

    • 1
  2. Best Answer

    You could also change in your sshd configuration file the following line :

    PermitRootLogin without-password

    This will allow users to login as root but only using something else than password (kerberos tickets, ssh keys etc...)

    • 1

  3. Start with adding the special account to the group: 'sudo'

    %  useradd -G sudo specialsshaccount

    Your system may already be configured to allow users in this group to sudo w/o password.

    If not place this line in your /etc/sudoers (via visudo command)

    %sudo ALL=NOPASSWD: ALL

    protip: it's possible to allow only certain commands to execute without password (man sudoers)

    • 0