Introduction

This article explains how to manage shell users on your server, including user provisioning, SSH key assignment, and permission configuration, as well as how to access the server using the WebSSH browser-based terminal.

Shell User Management Screen

From this screen, you can create new shell users. By default, new users are assigned to the sudo group and use the Bash shell. You can modify these defaults during creation to control privilege escalation and shell environment. SSH keys can be assigned during user creation or added later to configure key-based authentication.

SSH keys can be added to your Webdock account from the profile screen. For instructions on generating an SSH key pair, refer to the SSH key setup guide. If you are using PuTTY, follow this article for generating keys and establishing SSH connections using PuTTY.

WebSSH Feature

The WebSSH feature provides a browser-based terminal for accessing your server without a local SSH client. From the list of existing shell users, use the available link to initiate a WebSSH session. This opens an interactive terminal where you can execute commands directly.

WebSSH access is secured through authenticated Webdock sessions. Users must be logged into their account before initiating a WebSSH session.

Sudo and Password Auth

On the right side of the interface, two configuration options are available: ‘Passwordless Sudo’ and ‘Password Authentication’, which control SSH login methods.

‘Passwordless Sudo’ allows users to execute sudo commands without being prompted for a password in new shell sessions.

‘Password Authentication’ enables SSH login using a username and password instead of SSH keys. While this method is convenient, it is less secure than key-based authentication and is not recommended for use.

Conclusion

Shell user management allows you to control server access with minimal setup, while WebSSH enables immediate access from your browser without additional tools. Together, these features streamline user administration and simplify secure server access.