Solved

disable scp and ftp over sssh for linux server

Posted on 2015-01-06
3
392 Views
Last Modified: 2015-03-16
Dear Experts:

We have provided the ssh access and root login details of our crm server which is running on redhat enterprise linux to the asterisk pbx implementer but we would like to restrict scp and ftp over the ssh , this is to protect the data going out from the crm server, as i have provided root login not sure we can acheive this , if required to provide new user I can create the one provide but please suggest how to achieve this, thanks
0
Comment
Question by:D_wathi
3 Comments
 
LVL 40

Assisted Solution

by:omarfarid
omarfarid earned 250 total points
ID: 40533156
Giving root access is enough to do any thing on the system.

You can add one account to the system and provide him / her priv. using sudo.

Please see below link on how to use sudo:

http://www.sudo.ws/sudoers.man.html
0
 
LVL 62

Expert Comment

by:gheist
ID: 40534002
root account is not restricted and it is not possible to restrict it. So you just gave out all your data and now got thinking ...
0
 
LVL 20

Accepted Solution

by:
tfewster earned 250 total points
ID: 40534185
You need to turn the problem around and decide what operations & privileges the PBX server should be allowed on the CRM server, then set up new userid(s) with appropriate sudo privilege escalation.

Possibly something like "useradd" with root permissions plus "su - dbuser create_new_db_user_script" if your PBX system was the master identity server.

Though it might be even better to have the CRM server as the master and grant ssh access to the PBX (High security to Low security system)
0

Featured Post

Ransomware-A Revenue Bonanza for Service Providers

Ransomware – malware that gets on your customers’ computers, encrypts their data, and extorts a hefty ransom for the decryption keys – is a surging new threat.  The purpose of this eBook is to educate the reader about ransomware attacks.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Introduction We as admins face situation where we need to redirect websites to another. This may be required as a part of an upgrade keeping the old URL but website should be served from new URL. This document would brief you on different ways ca…
Linux users are sometimes dumbfounded by the severe lack of documentation on a topic. Sometimes, the documentation is copious, but other times, you end up with some obscure "it varies depending on your distribution" over and over when searching for …
Connecting to an Amazon Linux EC2 Instance from Windows Using PuTTY.
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.

831 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question