Create an SSH user in ISPConfig and connect to it

Procédure

You can set up secure command-line access for your website directly from your server’s administration panel. The SSH (Secure Shell) protocol is an encrypted communication protocol that allows you to take remote control of a server and execute system commands securely. This guide shows you how to create a shell user account in ISPConfig, configure your access, and successfully make your first connection.

The steps

  1. Access the VPS management

    Log in to your LWS customer area, go to the list of your servers, and click Manage next to your ISPConfig VPS.

    Create an SSH user in ISPConfig and connect to it
  2. Open the ISPConfig panel

    In the Server Administration section, click Administration Panel to launch the ISPConfig web interface.

    Create an SSH user in ISPConfig and connect to it
  3. Open SSH user management

    In the top menu, click Sites, then in the side panel under Command Line, click SSH/SFTP-User.

    Create an SSH user in ISPConfig and connect to it
  4. Add a new shell user

    In the list of shell accounts, click the green Add new Shell-User button to open the creation form.

    Create an SSH user in ISPConfig and connect to it
  5. Fill in the shell account settings

    Select the relevant site in Site, enter a name in Username, then define a strong password or paste your public key in SSH-RSA / ED25519 Public-Key. Choose your environment in Chroot Shell (for example Jailkit), make sure the Active box is checked, then click Save.

    Create an SSH user in ISPConfig and connect to it
  6. Note the full account username

    Check that your new access appears with the Yes status in the table and note the full username shown in the Username column.

    Create an SSH user in ISPConfig and connect to it
  7. Check the server firewall

    Before starting the connection, make sure in your customer area that your server’s firewall does indeed allow incoming connections on the SSH port.

  8. Establish the SSH connection from your terminal

    Open your computer’s terminal and run the connection command, replacing it with your information: ssh defaultdemo@203.0.113.10 (fictitious example IP address). Confirm with your password or your key passphrase.

  9. Manage your files and leave the session

    Check your session with whoami, locate your folder with pwd and list the files with ls. To create or edit a document, use the nano fichier.txt command (save and exit with the Ctrl+X combination, then confirm with O), copy or compress your items as needed, then type exit to disconnect.

Common commands in an SSH session

Here are the basic commands to manage your files once connected to your hosting account:

  • whoami — displays the name of the currently logged-in user
  • pwd — shows the absolute path of the folder you are in
  • ls — lists the files and directories present in the current folder
  • nano — interactive text editor in the console for editing your files
  • cp and tar — respectively allow you to copy files and create compressed archives
  • exit — cleanly closes the remote shell session

Frequently asked questions

What is the difference between an ISPConfig shell user and the root user?

The ISPConfig shell user is limited to their website space and has no administrative privileges on the system. The root user administers the entire machine. On managed VPS servers, direct root access is blocked for security reasons; consult our dedicated help article “ROOT SSH Access” if you manage your system yourself.

What is chroot (Jailkit) in ISPConfig?

Chroot isolates the user in a closed directory tree corresponding to their site. It prevents the account from exploring the server’s system directories or accessing the data of other customers hosted on the same VPS.

What should I do in case of the error “Permission denied (publickey,password)”?

This error indicates an authentication refusal. Check that you are using the full prefixed username (e.g. defaultdemo), verify the password entry, or make sure the public key was pasted without any extra spaces.

What does the message “Connection refused” mean?

This message indicates that the remote machine is not responding on the requested port. Check that the SSH service is running and that your VPS firewall allows traffic on the connection port.

How do I fix the alert “REMOTE HOST IDENTIFICATION HAS CHANGED”?

This alert appears when the server’s security fingerprint has changed (for example after a reconfiguration). Clean the old entry on your local computer using the ssh-keygen -R 203.0.113.10 command (replacing it with your VPS IP address).

Useful links

help.lws.net/a/7954
Was this article helpful?

Yes

No

Read 3 times

Thank you! Feel free to ask questions about our documentation if you would like more information, and help us improve it.

Similar articles

A question about this article?

Ask the LWS team and the community. Answers are published after moderation.

Ask the LWS team and its community a question

GDPR: Controller: LWS-Ligne Web Services. Purpose: moderation and public publication of your question, possible notification of an answer. Legal basis: consent (Art. 6(1)(a) GDPR). Email retention: 90 days after notification, 12 months maximum without an answer. To exercise your rights, see the GDPR section of our Terms and Conditions.