#!/bin/bash
echo =====
echo The following accounts have root access:
echo =====
cut /etc/passwd -f1,3 -d: |grep :0 | cut -f1 -d:

said by severely depressed:

---

Since you bring up the sshd_config script, I do have a question.

Can you prohibit the login of other users besides root this way? If so, how?

I ask because my leetle old mother compete with foo-foo dog (pomeranian) insists on simple login passwords. She claims to be feeble minded (-heh-). So I'd like to have remote access for me via 'ssh' and prohibit remote login of all other users on her machine.

TIA

---

said by fritzmp :

---

You can

edit and add to /etc/pam.d/login

easier and better

edit /etc/security/access.config

This is good to use with the previous post above.

---

If you don't use PAM or are running a distro that doesn't have /etc/security/access.conf (Slack has neither), you can use the sshd_config to set this:
AllowUsers
This keyword can be followed by a list of user name patterns,
separated by spaces. If specified, login is allowed only for
users names that match one of the patterns. `*' and `'? can be
used as wildcards in the patterns. Only user names are valid; a
numerical user ID is not recognized. By default, login is
allowed for all users. If the pattern takes the form USER@HOST
then USER and HOST are separately checked, restricting logins to
particular users from particular hosts.

quote:

---

Having Problems with the kernel or hardware? Use this command:

tail /var/log/messages

---

said by rocketspeed :

---

Just don't forget to restart the sshd .

> service sshd restart

---

said by sporkme :

---

ps -auxwww | grep "daemonname" | awk '{print $2}' | xargs kill -9

---

said by cwnorris :

---

said by fritzmp :

---

You can

edit and add to /etc/pam.d/login

easier and better

edit /etc/security/access.config

This is good to use with the previous post above.

---

If you don't use PAM or are running a distro that doesn't have /etc/security/access.conf (Slack has neither), you can use the sshd_config to set this:
AllowUsers
This keyword can be followed by a list of user name patterns,
separated by spaces. If specified, login is allowed only for
users names that match one of the patterns. `*' and `'? can be
used as wildcards in the patterns. Only user names are valid; a
numerical user ID is not recognized. By default, login is
allowed for all users. If the pattern takes the form USER@HOST
then USER and HOST are separately checked, restricting logins to
particular users from particular hosts.

---

I was playing around and find that for ssh sessions cwnorris method is the easiest and safests for no0bs.

NEXT BIG TIP

When working on tightening up authentication and security have Two Terminals Open because if you lock your self out of your box you will then learn about single user login to recover.:)

PAM and Login will lock you out at the box, so take heed.
--
NTFS Killed My Parents. Get Freed A small band of FreeBSD users are working together in the shadows, observing, honing their skills, building their numbers, and plotting their future.

said by fritzmp :

---

NEXT BIG TIP

When working on tightening up authentication and security have Two Terminals Open because if you lock your self out of your box you will then learn about single user login to recover.:)

PAM and Login will lock you out at the box, so take heed.

---

code:

---

$ rm ./-troublesome-filename

---