Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I'm testing an instance of CopSSH on my local machine to get ready to implement an SSH server that will allow our development team to start using Mercurial over SSH. The CopSSH control panel is a useful GUI to the SSH configuration, but it inserts a ForceCommand directive, depending on what kind of shell access the user is given. Unfortunately, this breaks remote commands.

I can easily edit sshd_config manually, and everything works great. But if I start up the CopSSH control panel at any time, it overwrites the config file, inserting ForceCommand and causing problems.

Is there a way to stop the control panel from doing this? Is there a backup 'default' of sshd_config that it uses to overwrite the current one, or is it hard coded an unchangeable?

share|improve this question

1 Answer 1

up vote 1 down vote accepted

I don't have a definitive answer, but I have spend a fair amount of time searching on this issue. AFAIK, if you use the CopSSH control panel, then you cannot manually edit the sshd_config. It does not appear to use a template that would allow you to make changes that would be used by the control panel.

So basically you have to accept what the CopSSH control panel does for you, or manually maintain your accounts, and all the configuration.

share|improve this answer
    
I thought so. I honestly don't mind maintaining the config file manually (I use Linux at home, so I'm fairly comfortable with configuration files), but it would be unfortunate if someone was looking around in the server and could botch up the SSH connections just by opening the control panel. I suppose they shouldn't really be looking around the server, though. –  voithos Jun 2 '11 at 17:55
    
If you are going to manually maintain the file, you might want to delete the shortcut in the start menu for the control panel to discourage accidental changes. –  Zoredache Jun 2 '11 at 18:02
    
Indeed, I was thinking of doing just that. –  voithos Jun 2 '11 at 18:34

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.