Posts Tagged ‘ssh
Securing SSH on Mac OS X by limiting who can log in
This post will describe two different methods for securing SSH that work on both Tiger and Leopard (client or server). These tips can be done as needed on machines that will have ssh enabled, or as part of your deployment image(s). Personally, I make these changes to our images because if a machine is bound [...]
Mac OS X 10.4.10 Unnessesarily replaces sshd_config
It looks like Apple did a very unpleasant modification in the 10.4.10 update. They outright replaced the /etc/sshd_config for a tiny bit of “tidying up” of the GSSAPI section.
Before 10.4.10:
# GSSAPI options#GSSAPIStrictAcceptorCheck yes#GSSAPIKeyExchange yes
# GSSAPI options#GSSAPIAuthentication yes#GSSAPICleanupCredentials yes
After 10.4.10:
# GSSAPI options#GSSAPIAuthentication yes#GSSAPICleanupCredentials yes#GSSAPIStrictAcceptorCheck yes#GSSAPIKeyExchange yes
Now was it really necessary to replace the file? On our [...]
