Use individual accounts and key-based remote access instead of sharing root credentials
Goal
You should be able to demonstrate the result described in the lesson and explain why each step was necessary.
You should be able to demonstrate the result described in the lesson and explain why each step was necessary.
Step-by-step
01
Create a named user
Use an individual account so logs show who performed administrative actions.
02
Grant sudo intentionally
Add only trusted administrators to the sudo group.
03
Generate an SSH key
Create a modern key pair on the client and protect the private key.
04
Install the public key
Append only the public key to the server authorized_keys file with correct permissions.
05
Test before disabling passwords
Open a second SSH session with the key and confirm sudo works before changing authentication policy.
Verify before moving on
You should be able to demonstrate the result described in the lesson and explain why each step was necessary.
You should be able to demonstrate the result described in the lesson and explain why each step was necessary.
Troubleshooting
If a command or screen differs from the lesson, stop and verify the version you are using before forcing a change.
What you learned
You now understand the purpose of this part of the system and have a concrete result you can verify before continuing to the next lesson.