 | | | restrict remote logins to service accounts. | restrict remote logins to service accounts. 2006-01-17 - By Deke Clinger
Back
Perhaps I'm missing something about what you're trying to do, but have you
considered changing the password to something they don't know? That way, they
can still sudo to the account but can't login.
-Deke
On Tue, 17 Jan 2006 David.Knight@(protected) wrote:
> All,
> I have an issue with Admins/DBA's logging into my servers directly as
> service accounts such as user 'oracle'. I have had a hard time getting
> people to adopt the use of sudo. I am at the point where I need to
> restrict direct logins to these accounts. My goal is to force people to
> sudo to the service accounts from there assigned user account. I only
> allow ssh/scp connections to my servers. I have tried the sshd.config
> option "AllowUsers" but this also restricts scp logins. I can;t restrict
> this for automated processes run under the service accounts use scp. So
> the only thing I need to restrict is direct remote "ssh" logins.
> Any suggestions would be great.
>
> -David Knight
>
--
Taroon-list mailing list
Taroon-list@(protected)
https://www.redhat.com/mailman/listinfo/taroon-list
|
|
|