ssh secure setup help needed

[Roger Lawhorn]

I wish to achieve the following:

Telnet root login = blocked
Telnet user login = allowed
SCP/SSH root login with password = blocked
SCP/SSH root login passwordless = allowed

Which files and what settings do I use?

[Steven E. Protter]

Shalom,

http://www.hpux.ws/?p=19

Definitely will solve the second part.

I would solve the first part by disabling telnet in inetd.conf

There really is not a need for telnet any more.

SEP

[Kenan Erdey]

hi,

sometimes because of some applications telnet is still needed. you can achive first part create a file /etc/securetty and write console. this will allow root login only from console.

# echo console > /etc/securetty

[Roger Lawhorn]

Thanks to both of you.
I think I have the answers I needed.
I am going ahead with the change.