Web Hosting Talk







View Full Version : importance of ssh?


thinguy
02-22-2004, 04:47 PM
I have an end-user account with ecphosting and I'm thinking of getting a reseller account for some web-dev/hosting side business.

I've had excellent service and support with ecphosting but they do not offer SSH. From a security POV I like that but some times I've wanted to do or install things where SSH would have been nice.

Whould you get an account without SSH?

I plan to sell to businesses that need a web presense but have no knowledge or desire to manage it.

Argious
02-22-2004, 04:56 PM
Would I get an account without SSH?
For general purposes, yes. Most websites really don't even require ssh. The main reason why I use SSH is mainly sysadmin work as I own several boxes. And most businesses "that need a web presence but have no knowledge or desire to manage it" would probably not even know what SSH is, let alone how to use it to benefit them. I honestly do not think that offering plans without ssh is a problem.

choon
02-22-2004, 04:56 PM
Have you try to contact your host and ask for possibility to offer you SSH access for just that account when needed? Then after finishing your whatever, simply update your host that you have done and your host will remove the SSH access for that account or something like that? Just my suggestion ;)

Whereby for my personal POV, I will need SSH when needed :D

iWebSpeed
02-22-2004, 08:14 PM
i belive most reseller providers HAVE TO enable SSH, but only on request

pookster
02-22-2004, 09:40 PM
Even though I am not officially a reseller yet :bawling:, I think SSH is vital for the reseller. That's why I think VPS/VDS is becoming big with resellers for as it gives the reseller more control over the server. Then again, if you have a server admin who is willing to do upgrades and etc upon your request, then that would be the best route.

I love using SSH for as I can get things done in which I would have a harder time to do through a web based system. But, I would NOT offer SSH to regular users. And if I did, it would be upon request and for a VERY good reason.

Pookster :eek:

dynamicnet
02-22-2004, 10:46 PM
Greetings:

We've been in hosting for almost 8 years out of the 9 years in business; we have yet to offer SSH to our shared hosting customers including resellers.

The lack of SSH has not hindered anyone.

We use H-Sphere (http://www.psoft.net/) for our shared automation system.

It allows customers and resellers to create and edit cron entries, along with hundreds of other things that most people argue SSH is needed.

The most common argument we continue to hear is from developers wanting access to the command line.

Yet, I've been programming for over 20 years, and the lack of SSH (when working with clients on other hosts) hasn't stopped me.

So from our stand point, SSH is not necessary for shared hosting or reseller hosting.

Thank you.

thinguy
02-22-2004, 11:53 PM
My customers aren't going to know what SSH is or know that its missing. I'm more concerned for my own use, service, and support.

Thanks all

BWS
02-24-2004, 05:25 AM
If a customer knows what SSH is then that's a starting point!

We'd enable SSH only for customers that have a good reason for wanting it, and are capable of using it!

As mentioned previously we'd much prefer them to request it, do any necessary work and then we'd remove it again. That said, at the moment, none of our customers have SSH access!

Keiron

NexDog
02-24-2004, 10:01 AM
SSH was always designed for server administrators and not for your average Joe to play around with. If you let someone have SSH access to your server, you just made it slightly easier to get hacked. People think that faxing licence details etc is enough to prove trust. But do you trust everyone that person trusts? Do you trust the security of his PC?

Anybody want to know a script(s) that you can use to break out of most jailed environments?

Sheesh, it's easy enough to get rooted on most servers just via php exploits.

coight
02-24-2004, 10:17 AM
Laurence, I agree with you but requiring customers to fax some documentation through will weed out some of the nasty buggers trying to exploit your system.

I agree 100% with your php statement though.

datums
02-24-2004, 10:22 AM
Worse case scenerio, give the customer a jailed shell. Tell them that this is a one time thing. Again you can massage it with Server Quality of Service.

NexDog
02-24-2004, 10:28 AM
Worse case scenerio, give the customer a jailed shell

Anybody want to know a script(s) that you can use to break out of most jailed environments?

Rob, I don't doubt the integrity of people that are willing to jump through some hoops to get SSH. But like I said, you aren't just trusting them. Something to ponder....

coight
02-24-2004, 10:31 AM
I understand. Though I believe it's better to get them to jump through hoops to obtain it than give it to anyone :).

If only people were honest and had the right intentions. Idiots abuse the services we hosts offer then the legit customers need to suffer.

NexDog
02-24-2004, 10:36 AM
Damn, Rob, you going to hit 4000 before me. Just haven't got so much free time to spend at WHT these days. :(

Have projects coming out my ears but 2004 is going to be so amazing. Loving this business right now. But I'll make a special effort to put in an appearance. We regiular posting old-timers do have a responsibility after all. ;)

coight
02-24-2004, 10:41 AM
The large contribution in the last few weeks is due to Redhat Enterprise :) & Redhat's sh*tty kernel's :)

NexDog
02-24-2004, 10:52 AM
We only have 3 RHE servers at the mo and I try and spend as little time in them as possible. :D

coight
02-24-2004, 11:13 AM
It's lucky they are not here otherwise they would be in pieces by now. I was pulling my hair out for a couple of weeks :D