Postingan

Menampilkan postingan dari Oktober, 2017

Oleh - oleh bleyer Anniversary YYKC Jogja

Gambar

Cara membuat user agar tidak bisa login ssh, dan hanya bisa login ftp pada ubuntu

Cara ini merupakan salah sati pengamanan  server, hal itu karena jika kita memiliki user namun apabila mempunya wewenang atau hak ases untuk meremote server padahal user itu ditujukan hanya untuk mengakses server ftp. Jadi dengan mendisable user tersebut untuk remote pakai ssh atau yang lain . Maka hak akses dapat di batasi. Berikut langkah mendisable user agar hanya bisa mengakses ftp :\ Pertama edit file ftponly yg ada di direktori bin : sudo nano /bin/ftponly Didalam file ini kita tambahkan bahwa user tidak bisa mengakses ssh, copy scrip dibawah ini : #!/bin/sh echo "This account is limited to FTP access only." Ubah permission agar bisa di eksekusi: sudo chmod a+x /bin/ftponly Kemudian buka valid shell: sudo nano /etc/shells tambahkan di baris bawah: /etc/shells . . . /bin/ftponly Perbarui shell user yg akan di disable aksesnya dengan perintah berikut: sudo usermod sammy -s /bin/ftponly Coba login dengan : ssh sammy@ 203.0.113....

How to install https and ssl (nginx) on ubuntu

Gambar
Introduction TLS , or transport layer security, and its predecessor SSL , which stands for secure sockets layer, are web protocols used to wrap normal traffic in a protected, encrypted wrapper. Using this technology, servers can send traffic safely between the server and clients without the possibility of the messages being intercepted by outside parties. The certificate system also assists users in verifying the identity of the sites that they are connecting with. In this guide, we will show you how to set up a self-signed SSL certificate for use with an Nginx web server on an Ubuntu 16.04 server. Note: A self-signed certificate will encrypt communication between your server and any clients. However, because it is not signed by any of the trusted certificate authorities included with web browsers, users cannot use the certificate to validate the identity of your server automatically. A self-signed certificate may be appropriate if you do not have a...