Question

root password login only from control panel

Posted December 22, 2015 2.7k views
Linux Basics Ubuntu Getting Started DigitalOcean Configuration Management Control Panels LEMP

Hi,

I know that the best way is to have ssh key authentication but the problem is that sometimes we lose the keys and then the only way is to have root access again to generate new keys etc.
Is it possible to disable any root/user password login from remote but only allow it from the control panel?

Thanks,

Add a comment
support795065
By:
support795065
Add a comment

These answers are provided by our Community. If you find them useful, show some love by clicking the heart. If you run into issues leave a comment, or add your own answer to help others.

1 answer
jcolyer February 24, 2016

What you can do is have the root user only authenticate using SSH keys. Since the SSH settings do not impact the Web Console, you can even disable the root user and still be able to use the DigitalOcean Web Console to login to your droplet in case something were to happen to your keys.

To make it so only SSH keys authenticate, have your /etc/ssh/sshd_config file have this line in it:

PasswordAuthentication no

To disable the root user completely, have your /etc/ssh/sshd_config file have this line in it:

PermitRootLogin no

Remember to have these changes take effect, you need to restart your SSH service.

Hope it helps,
Jason Colyer
DigitalOcean Platform Support Lead

Reply Report
Submit an Answer

Related

Looking for something else?

Ask a new question Search for more help