Secure connection with SSH

[MR VILLOT MR MONTAGNE]

Hello,

I would like to know how I can force connection with SSH to not use Reflexion X.
I want to be able to open Xsession from ssh session also.

I want to forbidden root connection. I created /etc/securetty file but connection with Reflexion is still possible.

Somebody knows methods to implement secure connection in graphical environnment.

Thanks
Laurent

[Ivajlo Yanakiev]

In your ssh_config:

ForwardX11 no

[HGN]

Hi

Check both the files
ssh_config
sshd_config

ssh_config check for
# ForwardX11 no
sshd_config check for
#X11Forwarding yes
#X11DisplayOffset 10
#X11UseLocalhost no

Rgds

HGN

[Ivajlo Yanakiev]

also for root access :
add this line
PermitRootLogin no

[Sanjay_6]

HI Laurent,

Try this link from itrc,

http://www2.itrc.hp.com/service/cki/docDisplay.do?docLocale=en_US&docId=200000062906659

Check option 3 & 4. This shows how you can restrict access to CDE for specific user. It allow root, but you can block that.

http://www2.itrc.hp.com/service/cki/docDisplay.do?docLocale=en_US&docId=200000062906659

the itrc doc id is CDEKBRC00006846

Do remember that if you are not running Reflection X on your PC. Your ssh connection would not have a X server to connect to.

Normally the way i do this is connectt through Reflection X / Exceed to a local workstation and then do ssh from there to my hp server, export the display to my local workstation and i can run x apps from my hp server.

Hope this helps.

Regds