This guide will demonstrate how to setup users on a Linux instance on a Windows machine and how to create SSH Keys for those users.
“User Setup” will provide instructions on how to add and delete users, as well as assigning sudo privileges. Sudo will provide users administrative privileges.
“SSH Keys” provide a secure way of logging into servers and are recommended for all users. Configuring SSH-key-based authentication to your server allows users to sign in without providing an account password.
CentOS 7: User Setup
Create User
Connect to your server through PuTTY. If you don’t already have PuTTY installed, please follow the link SSH to Instance using Windows.
Create new user, for example newuser, and give the user a password with the following commands:
sudo adduser newuser
sudo passwd newuser |
Assigning Sudo Permissions [Optional]
To give the user sudo permissions, add the user to the group wheel, which gives sudo access to all members.
sudo gpasswd -a newuser wheel |
The function lid shows which groups a user belongs to. Using function lid with -g flag will show which users belong in the indicated group.
The following will show the usernames of those in the group wheel.
To remove sudo permission, remove user from group wheel.
sudo gpasswd -d newuser wheel |
Delete User
If there is a user account no longer needed, run the following to delete the user without deleting their files:
To delete the user’s home directory and account, run this instead:
Both commands will automatically remove users from all added groups.
CentOS 8: User Setup
Create User
Connect to your server through PuTTY. If you don’t already have PuTTY installed, please follow the link SSH to Instance using Windows.
Create new user, for example newuser, and give the user a password with the following commands:
sudo adduser newuser
sudo passwd newuser |
Assigning Sudo Permissions [Optional]
To give the user sudo permissions, add the user to the group wheel, which gives sudo access to all its members.
sudo usermod -aG wheel newuser |
The function lid shows which groups a user belongs to. Using function lid with -g flag will show which users belong in the indicated group.
The following will show the usernames of those in the group wheel.
To remove sudo permission, remove user from group wheel.
sudo gpasswd -d newuser wheel |
Delete User
If there is a user account no longer needed, run the following to delete the user without deleting their files:
To delete the user’s home directory and account, run this instead:
Both commands will automatically remove users from all added groups.
Ubuntu: User Setup
Create User
Connect to your server through PuTTY. If you don’t already have PuTTY installed, please follow the link SSH to Instance using Windows.
Create new user, for example newuser, with the following commands:
This command will also ask to:
Assign and confirm a password for the new user
Enter any additional information about the new user. This is optional and can be skipped by pressingENTER.
Enter Y to confirm the information and continue.
Assigning Sudo Permissions [Optional]
To give the user sudo permissions, add the user to the group sudo, which gives sudo access to all members.
sudo usermod -aG sudo newuser |
The following will show the usernames of those in the group sudo.
To remove sudo permission, remove user from group wheel.
sudo gpasswd -d newuser wheel |
Delete User
If there is a user account no longer needed, run the following to delete the user without deleting their files:
To delete the user’s home directory and account, run this instead:
sudo deluser --remove-home newuser |
Both commands will automatically remove users from all added groups.
SSH Key (CentOS 7, CentOS 8, & Ubuntu)
Open PuTTYgen. If it’s not installed yet, please install it from here.
Click Generate to click a new public and private key. PuTTYgen will ask you to move your mouse across the window to generate it.
Note: One can change the Key Comment to provide a better description and add a Passphrase for extra security upon signing in. The Passphrase is similar to a password.
Save the public key and save the private key.
Public key is copied to the SSH server. Anyone with this key can encrypt data which can only by read by those with a private key.
Private key is proof of the user’s identity. Only a user with the private key that corresponds to the public key will be able to authenticate successfully.
Leave the window open. We will need to copy the key under Public key for pasting in OpenSSH authorized_keys file. To copy the key, right-click on it, click Select All then Copy.
Connect to the server through a new PuTTY session. See SSH to Instance using Windows.
Switch to the desired user you wish to provide access to. Ensure that this user has Sudo permissions.
Check if the SSH folder exists. If not, create it manually with the following:
mkdir ~/.ssh
chmod 0700 ~/.ssh
touch ~/.ssh/authorized_keys
chmod 0644 ~/.ssh/authorized_keys |
If the folder exists, running mkdir ~/.ssh should prompt
Note, for Ubuntu, this step will be slightly different. Instead, create the folder with:
mkdir ~/.ssh
chmod 700 ~/.ssh
touch ~/.ssh/authorized_keys
chmod 600 ~/.ssh/authorized_keys |
Paste the SSH public key into your authorized keys.
sudo vim ~/.ssh/authorized_keys |
If the vim command is not found, download vim with the following command and retry.
Centos 7: sudo yum install vim
Centos 8: sudo dnf install vim
Copy the PuTTYgen key from Step 4. In the PuTTy ~/.ssh/authorized_keys window, tap the i or insert key on your keyboard. Press right-click to paste the key.
To save, press Esc, :, w, q, Enter.
Now let’s save our newuser PuTTY profile. Open a new PuTTY session.
Under Hostname, type your newuser@floatingipaddress, where newuser corresponds to the user from Step 6 and floatingipaddress is the IP address of the remote host.
In the left-hand menu, expand SSH under Connection. Click on Auth.
Click on Browse and locate the private key file you previously created.
Return to the Session page. Name your session. Click Save and then Open.
Upon connecting, you should be prompted to enter the Passphrase if one was added and see the terminal open. You should see that you logged in and were authenticated through your public key.
The red boxed item should the same as your Key Comment from Step 2.
Once key-based logins are working, you can decide to disable username and password logins for better security.
Edit server’s configuration file.
sudo vim /etc/ssh/sshd_config |
Tap the i or insert key on your keyboard and edit the lines, referenced below:
[...]
PasswordAuthentication no
[...]
UsePAM no
[...] |
To save, press esc, :, w, q, Enter.
Reload the server’s configuration.