Layer7 API Management

  • 1.  Can I create a local user that can SSH to the appliance that bypasses the SSG menu?

    Posted Nov 29, 2017 11:17 AM

    I need a local user that can SSH to the appliance that does not launch the SSG configuration menu.  Don't won't to use root either.  I created the user and granted the user the permissions I want using visudo but when I SSH to the appliance with that user I still get the menu.  Is there anyway to disable that menu for this user?

     

    Thanks

    Brent



  • 2.  Re: Can I create a local user that can SSH to the appliance that bypasses the SSG menu?
    Best Answer

    Posted Nov 29, 2017 05:41 PM

    Found the answer and it is pretty simple,  just have a .bash_profile that does not launch the menu.



  • 3.  Re: Can I create a local user that can SSH to the appliance that bypasses the SSG menu?

    Broadcom Employee
    Posted Nov 29, 2017 07:23 PM

    It's not recommended to change the default behavior of user ssgconfig.

    Another option is to configure ssh to allow a new user, but also not recommended due to security concern (particularly on prod env)

    1. vi /etc/ssh/ssh_allowed_users, add the new user name

    2. service sshd restart