How to enable root SSH login in amazon EC2 instance


In amazon EC2 instances, by default SSH login is done using keys. And the root login is disabled for security reasons. But times come when we have to enable remote SSH login as root. My situation came when I was doing xstream installation. I had to enter my root ssh details in their dashboard to initiate the installation.  So, here I am going to show, what I did to enable root login using password in amazon EC2. The steps below were done in Ubuntu 14.04 64-bit.





First lets enable login using password, to do this, change the line in /etc/ssh/sshd_config

 PasswordAuthentication no
to

 PasswordAuthentication yes

you can use Match block to narrow the permission to selected ip or user.




Second step is to enable root login through SSH.  Lets change the line in /etc/ssh/sshd_config

PermitRootLogin without-password
to

PermitRootLogin yes


Third step is to change the file /root/.ssh/authorized_keys file and remove the text before ssh-rsa. The text to remove is highlighted in red.

no-port-forwarding,no-agent-forwarding,no-X11-forwarding,command=”echo ‘Please login as the user \”ubuntu\” rather than the user \”root\”.’;echo;sleep 10″ ssh-rsa AAAAB3NzaC1yc2E0000DAQABAAABAQC9+9P2K0Fxa/tWoelrsCOgZt5lt2hjgwhPzCZG49eyWaTYYhMGLYOnj0rdzlEHk997HpZ2piF9Ftfdx5Hx71dMryv0FqOITvRay/hFCVMXd6diStSHp9eWKx0iULWy0aaaSpWazlgdvJUr6C7Aolt2TU9Gcj+bIxH4lv3RCTpLLLtlqhBhv8wb24xKSw+khpDuy83zWKkzRsZpIpYXVVEslUZD491yTC9xTg0tn2XRVeC82fWCdmR6bwYMbPY/EhTnTjJCwLirRX3123+hWahddyYD6brfE8yX6liRLLFPlBsxHNkAreisFO3EzBqwKNEqQH1EvMWyHLJx9v672Z MyCrazyFunKey-normal
Now, restart ssh using the command: 
 service ssh restart
You should be ready to SSH as root with password.

Note: Enabling root login may impose security risk, so disable it when you don't need it.

Comments

Post a Comment

Popular posts from this blog

Automate file upload in Selenium IDE

Image
Selenium IDE is an integrated development environment for Selenium tests. It records your interactions with websites to help you generate and maintain site automation, tests, and remove the need to manually step through repetitive tasks. Selenium IDE can be installed in Google Chrome from  here . For Firefox visit this  link . File upload in Selenium IDE cannot be automated simply by recording from the IDE. Because when we select the file input field, the dialog that opens up is a system window which cannot be controlled by Selenium IDE. Therefore, clicking the input file field to select a file will not work. Also the selected file path is changed to C:\fakepath\filename.extension. So to fix this issue, we need to configure the browser to support file upload and then instead of clicking the input field we set the file using ‘type’ selenium command which is shown below. First, to support file upload in Selenium IDE, configure your browser to support file upload: Visit ‘...
Read more

How To Install and Configure Nextcloud

Image
  Original post: https://www.digitalocean.com/community/tutorials/how-to-install-and-configure-nextcloud-on-ubuntu-20-04 Step 1 – Installing Nextcloud We will be installing Nextcloud using the  Snap  packaging system. This packaging system, available on Ubuntu 20.04 by default, allows organizations to ship software, along with all associated dependencies and configuration, in a self-contained unit with automatic updates. This means that instead of installing and configuring a web and database server and then configuring the Nextcloud app to run on it, we can install the  snap  package which handles the underlying systems automatically. To download the Nextcloud snap package and install it on the system, type: sudo snap install nextcloud Copy The Nextcloud package will be downloaded and installed on your server. You can confirm that the installation process was successful by listing the changes associated with the snap: snap changes nextcloud Copy Output I...
Read more

Bruteforce a router to hack admin password using Hydra

Image
Hydra can be used for bruteforce attack on a router to retrieve admin's password. For this, a password list needs to be created for my case it is password.lst. The username I am using in the bruteforce attack is admin and the router's password is 192.168.1.19 which might differ for your case. The command is as follows that I used: hydra -l admin -P password.lst 192.168.1.19 http-get -m / The above image shows a screenshot of my attack used on my TP-LINK router. The found password is underlined by red underline.
Read more