sshd_config

Manny kcmanny at gmail.com
Fri Mar 18 17:22:36 UTC 2005


On Fri, 18 Mar 2005 10:31:51 -0600, Aleksandar Milivojevic
<amilivojevic at pbl.ca> wrote:
> James Wilkinson wrote:
> 
> > Possibly the best fix would be to get anaconda / kickstart / whatever to
> > set up a normal user account as well as root *before* that reboot. Feel
> > free to enter a bugzilla RFE.
> 
> Using kickstart:
> 
> ===== 8< Cut Here 8< =====
> %post
> #! /bin/sh
> 
> cp /etc/ssh/sshd_config /etc/ssh/sshd_config.orig
> 
> sed 's/^PermitRootLogin.*/PermitRootLogin no/' \
>      /etc/ssh/sshd_config.orig > /etc/ssh/sshd_config
> 
> useradd -p 'o3o4fu0JNNFDo' -c "Foo Bar" -m -n foobar
> 
> touch /.autorelabel
> ===== 8< Cut Here 8< =====
> 
> Parameter for '-p' is crypted password.  You can copy and paste some
> existing entry from /etc/shadow, or use some tool to generate it on
> command line (for example "slappasswd -h '{crypt}'" utility, from
> openldap-servers, will do the job).  Touching dot autorelabel file is
> there because files created in postinstall scripts usually don't have
> correct SELinux security contexts.
> 
> --
> Aleksandar Milivojevic <amilivojevic at pbl.ca>    Pollard Banknote Limited
> Systems Administrator                           1499 Buffalo Place
> Tel: (204) 474-2323 ext 276                     Winnipeg, MB  R3T 1L7
> 
> --
> fedora-list mailing list
> fedora-list at redhat.com
> To unsubscribe: http://www.redhat.com/mailman/listinfo/fedora-list

=================

Cool! Thanx for all the help and the feedback. I've been away from
Linux for a long time, and I just started to get back into it again,
so I wasn't sure. Some things I remember, some not so good at. But
thnx again for the feedback!




More information about the fedora-list mailing list