RH124 Ch 10: Harden the SSH Server

Name: WebAsha Technologies
Address: Pune, Maharashtra, IN

Security audit findings for servera: root can log in over SSH with a password, idle sessions never time out, and passwords are accepted at all. Fix the SSH server configuration — but set up student's key first so you do not lock the team out.

Tasks

Make sure student can log in from servera to serverb with an SSH key (no password).
Configure the SSH server on servera so that root cannot log in over SSH at all.
Disable password authentication on the servera SSH server (keys only).
Make the server check idle clients every 300 seconds (ClientAliveInterval).