Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feature: Have a simple option to disable enable SSH for an account owner #703

Open
shoulders opened this issue Nov 30, 2023 · 7 comments
Open

Comments

@shoulders
Copy link

SYSTEM INFORMATION
OS type and version Ubuntu Linux 22.04.3
Webmin version 2.105
Usermin version 2.005
Virtualmin version 7.8.2  
Theme version 21.09.5
Package updates 12 package updates are available

The issue

There is no simple way to enable/disable SSH access for account owners.

you can use Virtualmin --> System Customization -->custom shells to set things globally

Why

most amatuer hosters will just want SSH off for everyone and they need an easy way to set this. I am from the windows world so the custom shells is far beyond me but I know I should turn SSH of for most of my accounts, they dont need it.

The proposed solution

  • have an option in the sever template and corresponding option in the Virtual server somewhere so you can toggle (enable/disable) SSH for the account owner.
  • The account owner should not be able to enable/disble this themselves.
@iliajie
Copy link
Collaborator

iliajie commented Nov 30, 2023

Hello,

This is a good suggestion. As I'm working now on improving Edit Users page, so I don't mind adding a drop-down for having control over virtual server administrator user shell.

@jcameron
Copy link
Collaborator

You can already configure the domain owner's shell at Manage Virtual Server -> Server Owner Limits -> Other restrictions -> Allowed login type.

@shoulders
Copy link
Author

I cant, the permissions are hardcoded. Also this initial setting should be settable in the server template.

image

Virtualmin --> Administration Options --> Edit Owner Limits --> Other restrictions

@jcameron
Copy link
Collaborator

jcameron commented Dec 1, 2023

You may need to designate another shell as usable by domain admins at System Customization -> Custom Shells.

Also, you can designate a default shell in the server templates, on the Administration user page.

@shoulders
Copy link
Author

You may need to designate another shell as usable by domain admins at System Customization -> Custom Shells.
Also, you can designate a default shell in the server templates, on the Administration user page.

As an end user, I have no idea what these settings mean, hence the on/off button 😄.

@iliajie
Copy link
Collaborator

iliajie commented Dec 5, 2023

As an end user, I have no idea what these settings mean, hence the on/off button 😄.

Yes, I agree, it isn't simple to grasp for the normal users. We may change this though for master administrator to be able to create SSH users. I'm working on improving Edit Users page, which should address this issue as well.

@jcameron
Copy link
Collaborator

jcameron commented Dec 6, 2023

One easy improvement we could make would be to add a no-SSH shell as one of the default options for the domain admin user.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants