topic Secure connection with SSH in Operating System - HP-UX

Secure connection with SSH

MR VILLOT MR MONTAGNE — Mon, 22 Nov 2004 08:01:13 GMT

Hello,

I would like to know how I can force connection with SSH to not use Reflexion X.
I want to be able to open Xsession from ssh session also.

I want to forbidden root connection. I created /etc/securetty file but connection with Reflexion is still possible.

Somebody knows methods to implement secure connection in graphical environnment.

Thanks
Laurent

Re: Secure connection with SSH

Ivajlo Yanakiev — Mon, 22 Nov 2004 08:23:21 GMT

In your ssh_config:

ForwardX11 no

Re: Secure connection with SSH

HGN — Mon, 22 Nov 2004 08:30:02 GMT

Hi

Check both the files
ssh_config
sshd_config

ssh_config check for
# ForwardX11 no
sshd_config check for
#X11Forwarding yes
#X11DisplayOffset 10
#X11UseLocalhost no

Rgds

HGN

Re: Secure connection with SSH

Ivajlo Yanakiev — Mon, 22 Nov 2004 08:32:28 GMT

also for root access :
add this line
PermitRootLogin no

Re: Secure connection with SSH

Sanjay_6 — Mon, 22 Nov 2004 10:19:18 GMT

HI Laurent,

Try this link from itrc,

http://www2.itrc.hp.com/service/cki/docDisplay.do?docLocale=en_US&docId=200000062906659

Check option 3 & 4. This shows how you can restrict access to CDE for specific user. It allow root, but you can block that.

http://www2.itrc.hp.com/service/cki/docDisplay.do?docLocale=en_US&docId=200000062906659

the itrc doc id is CDEKBRC00006846

Do remember that if you are not running Reflection X on your PC. Your ssh connection would not have a X server to connect to.

Normally the way i do this is connectt through Reflection X / Exceed to a local workstation and then do ssh from there to my hp server, export the display to my local workstation and i can run x apps from my hp server.

Hope this helps.

Regds