Enabling IP-Restricted SSH Access from Viewpoint to Ecosystem Manager Servers - Teradata Ecosystem Manager

Teradata® Ecosystem Manager Installation, Configuration, and Upgrade Guide for Customers

Product
Teradata Ecosystem Manager
Release Number
16.20
Published
December 2020
Language
English (United States)
Last Update
2020-12-23
dita:mapPath
ntu1488477755124.ditamap
dita:ditavalPath
3203_ICUCustomer_em_1610.ditaval.ditaval
dita:id
B035-3203
Product Category
Analytical Ecosystem
If root access to the Ecosystem Manager server is disabled, complete the following steps to enable SSH with public key authentication as root user from Viewpoint to the Ecosystem Manager server and block root with password access.
  1. Modify sshd_config on the Ecosystem Manager servers:
    $ vi /etc/ssh/sshd_config
    # Globally disables all root logins over SSH 
    PermitRootLogin no 
    ... 
    
    # Match block for Viewpoint IP's - This should be at the very end of 
    # the /etc/ssh/sshd_config file 
    # Permits public key authentication as root only for the ip addresses
    # referenced above
    Match Address 10.25.112.27,10.25.112.194 
    PermitRootLogin without-password 
  2. Restart sshd:
    $ /etc/init.d/sshd restart