From: Daniel Troeder <daniel@admin-box.com>
To: gentoo-user@lists.gentoo.org
Subject: Re: [gentoo-user] OT -- superuser file manager access to remote via ssh with no root login?
Date: Tue, 24 Feb 2009 21:26:18 +0100 [thread overview]
Message-ID: <1235507178.9075.9.camel@maya.local> (raw)
In-Reply-To: <20090224090242.40f2b26f@lappy.evolone.org>
[-- Attachment #1: Type: text/plain, Size: 1036 bytes --]
Am Dienstag, den 24.02.2009, 09:02 -0800 schrieb Michael Higgins:
> I can't figure this one out.
>
> Have disallowed root login, public key auth.
>
> Have a bunch of random renaming to do on that machine though, so would like to point and click for a change.
>
> Is this possible? No GUI libs on the remote machine...
>
> I was thinking sshfs, but since I can't login directly as root, is there some other way?
Something like this might work:
# cp /etc/ssh/sshd_config /root/sshd_root_allow_config
Then edit /root/sshd_root_allow_config to allow root-login, to listen on
a port != 22 and to use another PID-file:
---
Port 222
PidFile /var/run/sshd_root_allow.pid
PermitRootLogin yes
---
Install app-admin/sudo and configure, that your login-user can execute
the following two commands (maybe only these!?!):
# sudo /usr/sbin/sshd -f /root/sshd_root_allow_config
# sudo kill $(cat /var/run/sshd_root_allow.pid)
Then you can use sshfs to port 222 between the two commands as root :)
Bye,
Daniel
[-- Attachment #2: Dies ist ein digital signierter Nachrichtenteil --]
[-- Type: application/pgp-signature, Size: 197 bytes --]
next prev parent reply other threads:[~2009-02-24 20:26 UTC|newest]
Thread overview: 8+ messages / expand[flat|nested] mbox.gz Atom feed top
2009-02-24 17:02 [gentoo-user] OT -- superuser file manager access to remote via ssh with no root login? Michael Higgins
2009-02-24 17:10 ` [gentoo-user] " Nikos Chantziaras
2009-02-24 17:12 ` [gentoo-user] " Alan McKinnon
2009-02-24 19:50 ` Paul Hartman
2009-02-24 20:26 ` Daniel Troeder [this message]
2009-02-25 3:42 ` Mike Kazantsev
2009-02-25 8:50 ` Stroller
2009-02-25 17:13 ` Michael Higgins
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=1235507178.9075.9.camel@maya.local \
--to=daniel@admin-box.com \
--cc=gentoo-user@lists.gentoo.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox