ssh

[laguna]

I attempted to secure my VPS by following the info at this link:

http://www.webhostingtalk.com/showthread.php?t=468168

But I've run into some issues. Openbasedir was one I just posted about.

Another is disabling password authentication and using Putty for ssh. When I do that, the support group can not access my vps to support it.

Any ideas on how to disable password auth yet still allow support in?

 

[khiltd]

This is kind of like asking how to open your car door after you've welded it shut. Support uses password authentication, therefore, disabling it disables their ability to authenticate.

 

[laguna]

I see you think outside the box. I was thinking we should be able to tie password authentication to an ip address that might be supports. I know they are in India but I don't know if it is a single IP address.

 

[Dan]

Is this true?? Wow I've been running key auth for a while now and figured that support had their own ways to get in.

That is a serious blow to security if we can't disable passworth auth...

 

[khiltd]

I see you think outside the box. I was thinking we should be able to tie password authentication to an ip address that might be supports. I know they are in India but I don't know if it is a single IP address.

It almost certainly is not a single IP, and I'm not too sure KH support is in India.

 

[laguna]

Well they are definitely in India as that is where the access logged them from. But I did not save past accessess so don't know if there are a few ip addressess that we bound to password login or not.

 

[KH-Joel]

We employ wide range of people located around the world, some of the company employees live and work in India, US as well as other countries.

Joel