How to Manage SSH Users
|Release||Document Status||DB Platform||Categories|
|3.8 or higher||INFO||All||User Management|
How does ScaleArc manage SSH and how to include SSH users?
ScaleArc manages SSH from the ScaleArc UI and allows you to enable/disable SSH access for the "idb" user only. Information on how to use this can be found here: How to Enable SSH from ScaleArc UI
In some cases, additional users are needed to have SSH access to the ScaleArc system. The enable/disable SSH feature from the ScaleArc UI changes the file /etc/ssh/sshd_config to only include the "idb" user for SSH access. Each time the enable/disable SSH feature from the ScaleArc UI is triggered, it overwrites the content of /etc/ssh/sshd_config with the content from /etc/ssh/sshd_config.template.
Include additional SSH users:
Before performing below steps be sure that a system administrator adds requisite additional users and their passwords in the OS first. Then only
you can have ssh access enabled for them as mentioned below:
To include additional SSH users when the enable/disable SSH feature is triggered, add the SSH users to the file /etc/ssh/sshd_config.template.
##Scroll to the bottom of the file:
Match User admin,apache
Match User root
## SSH_ACCESS -- DO NOT ADD/MODIFY anything below this line
Match User %s,user1,user2 <-- ##add users
Save the file and disable/enable SSH from the UI again to confirm that the added users have SSH access.
**Notice that "root" user above is not allowed. If root is required, change "PasswordAuthentication yes"
**Note - Except the "idb" user, all additional ssh user managment (password, sudo, privileges) must be managed by the system administrator and cannot be managed from the ScaleArc UI.