Bind root to ip (Webmin)
Hello good people, Any one with an idea on how to bind/restrict webmin root access to a particular IP only? My plan is to avail my webmin globally but restrict root access.
On Tue, Jun 9, 2009 at 7:43 AM, mambo mutua <am.mambo@gmail.com> wrote:
Hello good people,
Any one with an idea on how to bind/restrict webmin root access to a particular IP only? My plan is to avail my webmin globally but restrict root access.
The root account of webmin is never the same as the system root account. I believe that is clear to you already. It only happens to have access to every functionality of webmin. You can login with it and create other accounts with full or restricted access to webmin. Given your "plan", and my explanation, I am not sure I understand what it is you'd like to achieve. Try explaining it differently. BTW, Linux by default allows (system's) root to ssh from anywhere, right? -- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254733744121/+254722743223 _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ "Clothes make the man. Naked people have little or no influence on society." -- Mark Twain
Wash/Skunks Am aware of (BTW, Linux by default allows (system's) root to ssh from anywhere, right?) and ok with it. If I may rephrase my Q; how do I lock the user with Global rights to a particular IP only. I need to ensure that no one outside my IP can access the Global user profile. I will appreciate your input. Mutua. 2009/6/9 Odhiambo ワシントン <odhiambo@gmail.com>
On Tue, Jun 9, 2009 at 7:43 AM, mambo mutua <am.mambo@gmail.com> wrote:
Hello good people,
Any one with an idea on how to bind/restrict webmin root access to a particular IP only? My plan is to avail my webmin globally but restrict root access.
The root account of webmin is never the same as the system root account. I believe that is clear to you already. It only happens to have access to every functionality of webmin. You can login with it and create other accounts with full or restricted access to webmin.
Given your "plan", and my explanation, I am not sure I understand what it is you'd like to achieve. Try explaining it differently.
BTW, Linux by default allows (system's) root to ssh from anywhere, right?
-- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254733744121/+254722743223 _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ "Clothes make the man. Naked people have little or no influence on society." -- Mark Twain
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks Other services @ http://my.co.ke Other lists ------------- Skunkworks announce: http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks-announce Science - http://lists.my.co.ke/cgi-bin/mailman/listinfo/science kazi - http://lists.my.co.ke/cgi-bin/mailman/admin/kazi/general
2009/6/9 mambo mutua <am.mambo@gmail.com>
Wash/Skunks
Am aware of (BTW, Linux by default allows (system's) root to ssh from anywhere, right?) and ok with it.
If I may rephrase my Q; how do I lock the user with Global rights to a particular IP only. I need to ensure that no one outside my IP can access the Global user profile.
I will appreciate your input.
Hi Mutua, If you googled for "webmin access control by IP" and the results returned did not address the issue, please let me know. I can investigate further. -- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254733744121/+254722743223 _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ "Clothes make the man. Naked people have little or no influence on society." -- Mark Twain
2009/6/9 Odhiambo ワシントン <odhiambo@gmail.com>
2009/6/9 mambo mutua <am.mambo@gmail.com>
Wash/Skunks
Am aware of (BTW, Linux by default allows (system's) root to ssh from anywhere, right?) and ok with it.
If I may rephrase my Q; how do I lock the user with Global rights to a particular IP only. I need to ensure that no one outside my IP can access the Global user profile.
I will appreciate your input.
Hi Mutua,
If you googled for "webmin access control by IP" and the results returned did not address the issue, please let me know. I can investigate further.
EDIT: This might help you as well - http://ubuntuforums.org/showthread.php?t=594785 -- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254733744121/+254722743223 _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ "Clothes make the man. Naked people have little or no influence on society." -- Mark Twain
If you can move global account to https, you could change port access using firewall. eg webmin http : users while webmin global account : https. Then allow https to one IP/host and deny rest. Its a long shot.... HTHs.
Aki, Your proposal seems great n workable.... thank you. Let me jump in to it and see. Washington the reason we have skunkworks is for us to share ideas, sending me to google doesn't help much. I had done this before posting my string..... We all know that you've been in the industry for decades, however shaping your attitude will earn you more respect. On Tue, Jun 9, 2009 at 2:08 PM, aki <aki275@googlemail.com> wrote:
If you can move global account to https, you could change port access using firewall. eg webmin http : users while webmin global account : https. Then allow https to one IP/host and deny rest. Its a long shot.... HTHs.
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks Other services @ http://my.co.ke Other lists ------------- Skunkworks announce: http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks-announce Science - http://lists.my.co.ke/cgi-bin/mailman/listinfo/science kazi - http://lists.my.co.ke/cgi-bin/mailman/admin/kazi/general
On Tue, Jun 9, 2009 at 3:42 PM, mambo mutua <am.mambo@gmail.com> wrote:
Aki,
Your proposal seems great n workable.... thank you. Let me jump in to it and see.
Washington the reason we have skunkworks is for us to share ideas, sending me to google doesn't help much. I had done this before posting my string..... We all know that you've been in the industry for decades, however shaping your attitude will earn you more respect.
Hi Mambo, I googled, read and pasted the search string that yielded the answers to your questions as I understood it. I did not mean to "send you to google" per se, but the answers were there, if only you could read them. I even followed with a direct link to oneof them and IMHO, they conform to what I love most - K.I.S.S.principle of implementation. Sorry if I've made you so angry. -- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254733744121/+254722743223 _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ "Clothes make the man. Naked people have little or no influence on society." -- Mark Twain
participants (3)
-
aki -
mambo mutua -
Odhiambo ワシントン