How to disable welcome message after SSH login?

Question

I have changed /etc/issue.net, so I have set a "personal" message after typing a username in an SSH terminal. Now I am trying to change the welcome text after successful login.

I have found a lot of posts about the /etc/motd file, but the part "Welcome to Ubuntu blabla versionnumber and so on" + "* Documentation URL " is not there?

I just do not want to show OS info in my SSH terminal, I already know what I have installed. :) I only want to see my last login. And also not errors; errors belong in a logfile.

Which file do I have to edit?

score 100 · Accepted Answer · edited Sep 22 '15 at 21:44

100

The welcome messages are generated by the files residing in /etc/update-motd.d/.

From man update-motd:

Executable scripts in /etc/update-motd.d/* are executed by pam_motd(8) as the root user at each login, and this information is concatenated in /var/run/motd.

So if you don't want the outputs of those scripts upon login via ssh just remove the execute flag on them:

sudo chmod -x /etc/update-motd.d/*

Now if you want to show something you want upon login, you have two options:

Make a script, put it in /etc/update-motd.d/, make it executable, also make sure it outputs on STDOUT.

ssh has a Banner option. You can put the text in a file and set it in the Banner option so that the content of the file is shown upon login via ssh. Note that this is applicable to only ssh.

Banner /etc/foobar

From man 5 sshd_config:

 Banner  The contents of the specified file are sent to the remote user
         before authentication is allowed.  If the argument is “none” then
         no banner is displayed.  This option is only available for
         protocol version 2.  By default, no banner is displayed.

edited Sep 22 '15 at 21:44

muru

207,970

answered Sep 20 '15 at 18:06

heemayl

94,145

17

My favorite answers all start with "From man xyz" ;) – A.B. Sep 20 '15 at 18:07
Thank you! Now i know the relationship between those files. I did not chmod them, just added # before some lines i do not want to show. – Terradon Sep 20 '15 at 18:47
@Terradon Yeah, that would do too..i just generalized the solution because many people won't like to look into the file much.. – heemayl Sep 20 '15 at 18:49
2

Great clean solution because chmoding the files means I don't have to edit them. Nice! – culix Aug 08 '16 at 04:27
3

...why do they put so much crap in the motd and waste people's time disabling it :s Nice solution with the chmod -x ! – Motsel Feb 01 '19 at 09:04
changing x permission with chmod doesn't work :( – Dan D Mar 05 '19 at 08:08
I disabled all those messages in /etc/update-motd/ but I still get a No mail and Last login: message. – Jan 03 '21 at 22:05
Standard seems to be that sort <= 50 is garbage, and sort > 50 is usefull status checks. – Tamir Daniely Jan 09 '22 at 12:08
If disabling x permission with chmod doesn't work, it means it is necessary to edit another files in /etc/update-motd/ direcotry – XuMuK Jan 13 '22 at 15:51
It does not work for everyone. – Philippe Remy Jun 17 '23 at 16:30

score 72 · Answer 2 · edited Sep 14 '22 at 01:08

72

Another way that does not require administrative rights is to place an empty file called

.hushlogin

into your $HOME directory (using for example touch ~/.hushlogin).

The downside to this solution is that you might miss a message saying something like

Last login: Wed Aug 22 16:00:10 2007 from l33t.hax0r.some.ips

that indicates your account has been compromised.

Source.

edited Sep 14 '22 at 01:08

Community

1

answered Sep 22 '19 at 07:41

Eph

821

8

Elegant, simple, doesn't mess with other users, no sudo. Thanks. – Jan Werkhoven Sep 24 '19 at 00:37
7

this is not "another way" but the best way ! – Yunus Mar 16 '20 at 23:31
@PhilippeRemy The user explicitly said that he wants to see the last login information. This answer hides the last login information. – Toxiro Feb 13 '24 at 11:15

score 8 · Answer 3 · edited Oct 22 '18 at 16:30

8

You can also nuke pam_motd altogether:

sed -i '/^[^#]*\<pam_motd.so\>/s/^/#/' /etc/pam.d/sshd

PAM calls pam_motd depending on the settings in /etc/pam.d, and typically the entries are:

$ grep pam_motd /etc/pam.d -R
/etc/pam.d/login:session    optional   pam_motd.so  motd=/run/motd.dynamic noupdate
/etc/pam.d/login:session    optional   pam_motd.so
/etc/pam.d/sshd:session    optional     pam_motd.so  motd=/run/motd.dynamic noupdate
/etc/pam.d/sshd:session    optional     pam_motd.so # [1]

Just commenting out the pam_motd lines from these files will disable it.

edited Oct 22 '18 at 16:30

David Foerster

36,900
56
98
152

answered Sep 20 '15 at 18:27

muru

207,970

Thanks for your time, but with "Nuke them all" i dont know what i am doing. (I am new to linux/ubuntu). – Terradon Sep 20 '15 at 18:54
1

@Terradon you're telling PAM not to call pam_motd.so, that's all. – muru Sep 20 '15 at 18:55
Thanks, i will take a closer look at what PAM.does exactly. – Terradon Sep 20 '15 at 19:01

score 7 · Answer 4 · answered Dec 03 '20 at 12:02

7

There might also be file under /etc/motd containing a welcome message which can easily be removed (the content).

answered Dec 03 '20 at 12:02

bomben

2,197

Thanks this was the case on Debian 10, and a nice quick easy fix! – kjones Mar 09 '21 at 23:19

How to disable welcome message after SSH login?

4 Answers4