Disable root SSH access

[MindServer]

Hi,

-If i edit file "/etc/ssh/sshd_config" and disable access with "root" account (PermitRootLogin = no), WHM/cPanel will have errors?.

-If i disable Port 22 and enable other port for access by SSH, WHM/cPanel will have problems/errors?.

-If i edit file "/etc/sudoers" and disable timestamp (for "sudo" command) will have any problem?: Defaults:ALL timestamp_timeout=0

Thank you very much.

 

[hmaddy]

1. No issues on whm/Cpanel. Before disabling root create key for ssh
2. No issues, you can change the port. Dont remember to add the port in Firewalls
3. No issues

 

[MindServer]

1. No issues on whm/Cpanel. Before disabling root create key for ssh
2. No issues, you can change the port. Dont remember to add the port in Firewalls
3. No issues

Thank you very much friend. Last question:

Can i use for example port 2000 or more for SSH?, or isn't recommended?. Please tell me wich is good recommendation port ranges for not have errors.

Thank you very much.

 

[hmaddy]

Thank you very much friend. Last question:

Can i use for example port 2000 or more for SSH?, or isn't recommended?. Please tell me wich is good recommendation port ranges for not have errors.

Thank you very much.

You can use any port which are not using by a cpanel server

 

[ZenHostingTravis]

Can i use for example port 2000 or more for SSH?, or isn't recommended?

You certainly can so long as you don't use a port that is already being used such as 2087.

 

[MindServer]

Thank you very much!

 

[keat63]

If you're not aware, using Host Access Control you can restrict SSH access to trusted IP's.
So regardless of which port it's on, no one is getting in unless they come from a trusted IP address.
I have mine locked down to just our office and the server provider.

 

[Jasongreen]

hi Please i keep having this issue. How do i get past it?
[25933] (DEBUG): Package bzip2-1.0.5-7.el6_0.x86_64 already installed and latest version
2020-06-12 05:30:27 414 [25933] (DEBUG): Package gnupg2-2.0.14-9.el6_10.x86_64 already installed and latest version
2020-06-12 05:30:27 414 [25933] (DEBUG): Package rdate-1.4-16.el6.x86_64 already installed and latest version
2020-06-12 05:30:27 414 [25933] (DEBUG): Package xz-4.999.9-0.5.beta.20091007git.el6.x86_64 already installed and latest version
2020-06-12 05:30:27 414 [25933] (DEBUG): Package yum-3.2.29-81.el6.centos.0.1.noarch already installed and latest version
2020-06-12 05:30:27 414 [25933] (DEBUG): Package yum-plugin-fastestmirror-1.1.30-42.el6_10.noarch already installed and latest version
2020-06-12 05:30:27 414 [25933] (DEBUG): Package nscd-2.12-1.212.el6_10.3.x86_64 already installed and latest version
2020-06-12 05:30:27 414 [25933] (DEBUG): Package crontabs-1.10-33.el6.noarch already installed and latest version
2020-06-12 05:30:27 414 [25933] (DEBUG): Package sysstat-9.0.4-33.el6_9.1.x86_64 already installed and latest version
2020-06-12 05:30:27 414 [25933] (DEBUG): Nothing to do
2020-06-12 05:30:27 414 [25933] (DEBUG): - ssystem [END]
....
2020-06-12 05:30:32 1620 [25915] ( INFO): The installation process will now set up the necessary empty cpanel directories.
2020-06-12 05:30:32 1651 [25915] ( INFO): The installation process will now ensure that GPG is set up properly before it imports keys.
2020-06-12 05:30:32 1654 [25915] ( INFO): The installation process will now import GPG keys for yum.
2020-06-12 05:30:32 2057 [25915] ( INFO): Downloading GPG public key, cPanelPublicKey.asc
2020-06-12 05:30:32 2066 [25915] ( INFO): Importing downloaded GPG public key from “/var/cpanel/.gpgtmpdir/cPanelPublicKey.asc”.
2020-06-12 05:30:32 1372 [25915] (DEBUG): Retrieving http://httpupdate.cpanel.net/cpanelsync/TIERS to the TIERS file...
2020-06-12 05:30:33 1372 [25915] (DEBUG): Retrieving http://httpupdate.cpanel.net/cpanelsync/TIERS.asc to the TIERS.asc file...
2020-06-12 05:30:33 2022 [25915] ( INFO): Valid signature for TIERS (file:TIERS, sig:TIERS.asc)
2020-06-12 05:30:33 232 [25915] ( INFO): Installing cPanel & WHM major version 88.
2020-06-12 05:30:33 1848 [25915] (DEBUG): - ssystem [BEGIN]: /usr/bin/rdate -s rdate.cpanel.net
2020-06-12 05:30:34 1848 [25915] (DEBUG): - ssystem [END]
2020-06-12 05:30:34 1850 [25915] ( INFO): The system set the clock to: Fri Jun 12 05:30:34 2020
2020-06-12 05:30:34 1860 [25915] ( INFO): The system changed the clock by 1 seconds.
2020-06-12 05:30:34 259 [25915] (DEBUG): - ssystem [BEGIN]: ps -U nscd -h 2>/dev/null || /sbin/service nscd start
2020-06-12 05:30:34 259 [25915] (DEBUG): 24535 ? Ssl 0:00 /usr/sbin/nscd
2020-06-12 05:30:34 259 [25915] (DEBUG): - ssystem [END]
2020-06-12 05:30:34 1804 [25915] (FATAL): As of cPanel & WHM version 88, we only support 64-bit versions of CentOS 7, Red Hat® Enterprise Linux® 7, and CloudLinux™ 6+.
Removing /root/installer.lock.
[[email protected] ~]# 2020-06-12 05:30:33 1158 [25956] ( INFO): Installing bootstrap cPanel Perl
2020-06-12 05:30:33 1167 [25956] (DEBUG): Retrieving the fix-cpanel-perl file from /cpanelsync/11.88.0.9/cpanel/scripts/fix-cpanel-perl.xz if available...
2020-06-12 05:30:33 1372 [25956] (DEBUG): Retrieving http://httpupdate.cpanel.net/cpanelsync/11.88.0.9/cpanel/scripts/fix-cpanel-perl.xz to the fix-cpanel-perl.xz file...
2020-06-12 05:30:33 1372 [25956] (DEBUG): Retrieving http://httpupdate.cpanel.net/cpanelsync/11.88.0.9/cpanel/scripts/fix-cpanel-perl.xz.asc to the fix-cpanel-perl.xz.asc file...
2020-06-12 05:30:34 2026 [25956] (FATAL): Unknown error from gpg. (file:fix-cpanel-perl.xz, sig:fix-cpanel-perl.xz.asc)
Use of uninitialized value in exit at /home/cPanelInstall/selfgz25863/install line 70.