GL-AXT1800 - add new user

Technical Support for Routers
1

Hello,

I just updated to latest 4.7.0 firmware just released. I am trying to setup ssh with pub key. Is there a was to add a different user, add it to sudoers, and disable ssh root logins. I do not see such option in main UI or LuCi. I am assuming CLI is the only option.
Before I try to add a new user which should be only for a ssh access I like to know a few things first.

  1. By using "adduser", is there some config I need to update to prevent such user logging using UI?
  2. I see dropbear config is located in /etc/dropbear. Any pointers correctly setting up dropbear? I normally used openssh-server.
    a. Disable root user ssh login
    b. Enable only new user ssh with pub key only aka "AllowUsers"
    c. Update/enable ssh user login logging. I do not see /var/log/auth.
    d. Does the authorized_keys should be placed in. new user ~/.ssh/ or it should be added globally to /etc/dropbear/authorized_keys?

Tx

2

OpenWrt does not support different users.

You can try to implement it, but it's not worth it, tbh.

1 Like
3

You are thinking about a user concept like a full blown Ubuntu or Debian. Login less privileged and execute only valid commands via sudo.
As there is no permanent login, the concept on a embedded device is different. You should have no need for a less privileged user. Either you have permission or you don't.

And if you want to share data, either provide an API or Ake it push instead of pull.

But at the end my answer will be the same as Admons.

4

That is what I figured. But it was worth to ask for clarity.