"adduser" command adds the user to VestaCP as well

[stelios]

Hi there,

When adding a new unix user via ssh using the "adduser" command it also adds the user to VestaCP as well and can't be deleted, is this how it should be ?

[stelios]

Am i the only one having this issue ?

Also is it ok to disable root access and change root pass after installing vesta ?

[drMacFaulty]

Am i the only one having this issue ?

Also is it ok to disable root access and change root pass after installing vesta ?

I guess this is normal behavior (code snippet from v-add-user). Notice the useradd function. This script also checks whether the user exists in /etc/passwd (where all linux users are present).

Code: Select all

# Adding user
/usr/sbin/useradd "$user" -s "$shell" -c "$email" -m -d "$HOMEDIR/$user"
if [ $? -ne 0 ]; then
    echo "Error: user creation failed"
    log_event "$E_INVALID" "$EVENT"
    exit $E_INVALID
fi

What do you mean by disabling root access? SSH? VestaCP Admin user? MySQL?
Please specify :)

[stelios]

What do you mean by disabling root access? SSH? VestaCP Admin user? MySQL?
Please specify :)

Hi there...thank you very very much for you reply :)

I meant SSH, i'm trying to make a vps using VestaCP as secure as possible but still open enough so a client can add his sites etc. So i'm open to any suggestions.

Cheers,
Stelios

[drMacFaulty]

What do you mean by disabling root access? SSH? VestaCP Admin user? MySQL?
Please specify :)

Hi there...thank you very very much for you reply :)

I meant SSH, i'm trying to make a vps using VestaCP as secure as possible but still open enough so a client can add his sites etc. So i'm open to any suggestions.

Cheers,
Stelios

You can deny root login from SSH. Will post the code and location tomorrow, as I'm currently on mobile.

[stelios]

You can deny root login from SSH. Will post the code and location tomorrow, as I'm currently on mobile.

I think it's in /etc/sss/sshd_config

Any more suggestions to make the VPS even more secure are more than welcome and appreciated :)

By the way in /root/ there are 4 files, deb_signing.key , vst-install-ubuntu.sh , vst-install.sh , vst_install_backups . Should we keeping vst-install-ubuntu.sh , vst-install.sh , vst_install_backups or is it safer to delete those ?

cheers

[drMacFaulty]

You can deny root login from SSH. Will post the code and location tomorrow, as I'm currently on mobile.

I think it's in /etc/sss/sshd_config

Any more suggestions to make the VPS even more secure are more than welcome and appreciated :)

By the way in /root/ there are 4 files, deb_signing.key , vst-install-ubuntu.sh , vst-install.sh , vst_install_backups . Should we keeping vst-install-ubuntu.sh , vst-install.sh , vst_install_backups or is it safer to delete those ?

cheers

- You could of course only allow ssh-key based logins :)
- You could close all unneeded ports.
- And so on...

I would leave those files where they are, the could come in handy in the future during troubleshooting or something.

[iamkingsleyf]

Try this http://www.servermom.org/basic-centos-s ... erver/414/