Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 28 Mar 2001 11:16:18 -0500
From:      Peter Radcliffe <pir@pir.net>
To:        security@freebsd.org
Subject:   Re: account control to ssh
Message-ID:  <20010328111618.C9865@pir.net>
In-Reply-To: <OF6C0D3E65.64F1D75B-ON86256A1D.00571C45@MC.VANDERBILT.EDU>; from George.Giles@mcmail.vanderbilt.edu on Wed, Mar 28, 2001 at 09:52:06AM -0600
References:  <OF6C0D3E65.64F1D75B-ON86256A1D.00571C45@MC.VANDERBILT.EDU>

next in thread | previous in thread | raw e-mail | index | archive | help
George.Giles@mcmail.vanderbilt.edu probably said:
> How would I restrict incoming ssh connections on a per user basis ?

Either with a pam module or the sshd config options
Allow/DenyUsers/Groups.

With openssh 2.5.0 or later you can use 'DenyGroups nossh' create a
'nossh' group and put users who should not be allowed to ssh in in
that group.  Pre-2.5.0 the group in DenyGroups has to be their primary
group listed in the password file.

P.

-- 
pir                  pir@pir.net                    pir@net.tufts.edu


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010328111618.C9865>