New answers tagged

1

Not really. In theory you could add a program to the %pre pre-install section. If this returns a non-zero exit code then install fails. However a user could always do an install with --no-script. And even if such enforcement was possible, an rpm is really a wrappered cpio file; a user could do rpm2cpio to convert it and then extract the files directly. ...


3

Configuration is OK, but you need to have some identities in your ssh-agent to be able to authorize the sudo operation. You can verify that your agent has some identities using ssh-add -L It should print the public keys in your agent and at least one of them should match the public key on server in /etc/security/authorized_keys. If the agent does not ...


2

Yes, you can require both kerberos and public key authentication with AuthenticationMethods sshd option. man 5 sshd_config: AuthenticationMethods Specifies the authentication methods that must be successfully completed for a user to be granted access. This option must be followed by one or more comma-separated lists of authentication ...


0

You can use lftp to do password authentication from a script. Password-less authentication can be very dangerous sometimes. Since I see that you are invoking this script for multiple servers, you will have to manually enter the passwords every time you use sftp. Instead, you can use lftp to put your password inside the script and run it as a cron-job. ...


0

If you want to use a user (or more users) that are able to login to several machines, it makes sense to use a central authentication system, that manages the tokens of the users. You may take a look at privacyIDEA, that can manage all kind of different token types and also define, which token is allowed on which machines (security levels). As far as "dont ...


0

Yes, there is a way to restrict this behaviour. This behaviour of su is governed by the PAM module (Plugable Authentication Module): You must edit /etc/pam.d/su comment the line : auth sufficient pam_rootok.so like this: #auth sufficient pam_rootok.so after that su from root will ask for the user password.



Top 50 recent answers are included