shell accounts

  • If we made it so that all hosted accts have a shared group. We could add a "Match" line to match just the hosting groups, and then add "AuthorizedKeysFile" line.


    This would force all hosting ssh accounts to use imscp loaded ssh keys, while leaving the rest of the accts on the server (i.e. admins, etc) to use ~/.ssh/authorized_hosts and ~/.ssh/authorized_hosts2


    For instance (just a sample):

    Code
    1. Match GROUP imscp_customer
    2. AuthorizedKeysFile /etc/ssh/imscp_keys/$u/authorized_keys
    3. AllowAgentForwarding no
    4. AllowTcpForwarding no
    5. PasswordAuthentication no
    6. GSSAPIAuthentication no
    7. HostbasedAuthentication no
    8. PubkeyAuthentication yes
    9. X11Forwarding no

    Edited once, last by kassah ().