Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 13 Jan 2000 17:41:11 -0800
From:      Lawrence Sica <larry@interactivate.com>
To:        Nicholas Brawn <ncb@zip.com.au>, freebsd-security@FreeBSD.ORG
Subject:   Re: Disallow remote login by regular user.
Message-ID:  <4.2.2.20000113173750.00bd29a0@mail.interactivate.com>
In-Reply-To: <Pine.LNX.4.10.10001141203280.3124-100000@zipperii.zip.com. au>

next in thread | previous in thread | raw e-mail | index | archive | help
At 12:06 PM 1/14/00 +1100, Nicholas Brawn wrote:
>Hi folks. I'm trying to ocnfigure my system so that I can disallow a
>particular user account from being able to login remotely, and forcing
>users to su to the account instead. How may I configure this?
>
>PS. Users may be using anything from telnet to ssh to login to the system,
>so I need something that works across the board.

across the board i'm not sure but i think you could modify the sshd_config 
file to deny the user remote login and telnet uses login so you could setup 
a  /etc/login.access file to deny access.  I haven't had to set this up so 
I'm thinking where i would start.  do a man on login.access for howto set 
that up.  It will allow you to give access to user by their tty.

Check the respective man pages for exact particulars.

HTH

--Larry



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4.2.2.20000113173750.00bd29a0>