Interfaz administrativa, login con SSH

classic Classic list List threaded Threaded
2 messages Options
Reply | Threaded
Open this post in threaded view
|

Interfaz administrativa, login con SSH

Frank Mascarell
Hi, sorry for the mistakes, I'm using google-translator :)

I hired a VPS on Digital Ocean, installed Django-Postgres and everything works

correctly. Now I want to increase the security of Django's administrative interface,
I want site administrators to login using SSH, eliminating authentication
by password. It would be something similar to when I connect to the server with PuTTY via SSH.

There is little documentation of SSH-Django, but I found an interesting package called
simplesshkey, which can relate SSH keys to a user, saving them in the database
of Django. I do not know if with this package I can achieve my goal, but I do not think so.

Is there any way to do this?
Can I reconsider another way of connecting as an administrator to the database, less

safe ? I would not like to have a remote open port in postgres, I would prefer it to be

Managed through Django.

--
You received this message because you are subscribed to the Google Groups "Django users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [hidden email].
To post to this group, send email to [hidden email].
Visit this group at https://groups.google.com/group/django-users.
To view this discussion on the web visit https://groups.google.com/d/msgid/django-users/9b1bb164-73af-4c92-9ed9-d7371c6bfa92%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
Reply | Threaded
Open this post in threaded view
|

Re: Interfaz administrativa, login con SSH

Vijay Khemlani
En general SSH sirve para hacer conexiones remotas por terminal (bueno, puedes hacer una sesión X a través de SSH pero no creo que sea lo que necesites)

La forma más común de aumentar la seguridad del login es por two factor authorization, básicamente mandar una validación a tu celular o algun otro dispositivo que valide que seas tú el que está iniciando sesión. 

Personalmente nunca lo he hecho, pero hay paquetes de Django que lo implementan


Aunque requieren cierto nivel de configuración

El proyecto que linkeas no parece servir para hacer login con llaves SSH, solo las almacena

Saludos

On Sun, Jun 10, 2018 at 8:49 PM Frank Mascarell <[hidden email]> wrote:
Hi, sorry for the mistakes, I'm using google-translator :)

I hired a VPS on Digital Ocean, installed Django-Postgres and everything works

correctly. Now I want to increase the security of Django's administrative interface,
I want site administrators to login using SSH, eliminating authentication
by password. It would be something similar to when I connect to the server with PuTTY via SSH.

There is little documentation of SSH-Django, but I found an interesting package called
simplesshkey, which can relate SSH keys to a user, saving them in the database
of Django. I do not know if with this package I can achieve my goal, but I do not think so.

Is there any way to do this?
Can I reconsider another way of connecting as an administrator to the database, less

safe ? I would not like to have a remote open port in postgres, I would prefer it to be

Managed through Django.

--
You received this message because you are subscribed to the Google Groups "Django users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [hidden email].
To post to this group, send email to [hidden email].
Visit this group at https://groups.google.com/group/django-users.
To view this discussion on the web visit https://groups.google.com/d/msgid/django-users/9b1bb164-73af-4c92-9ed9-d7371c6bfa92%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

--
You received this message because you are subscribed to the Google Groups "Django users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [hidden email].
To post to this group, send email to [hidden email].
Visit this group at https://groups.google.com/group/django-users.
To view this discussion on the web visit https://groups.google.com/d/msgid/django-users/CALn3ei0C20rLDPyKJXWNCksFS_-uoov_AyQJrdTGQ95ABF3sJg%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.