From owner-freebsd-questions@FreeBSD.ORG  Thu Oct  9 13:33:17 2008
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 91A901065686
	for <freebsd-questions@freebsd.org>;
	Thu,  9 Oct 2008 13:33:17 +0000 (UTC)
	(envelope-from jeremyhooks@googlemail.com)
Received: from ug-out-1314.google.com (ug-out-1314.google.com [66.249.92.168])
	by mx1.freebsd.org (Postfix) with ESMTP id 16AB58FC1D
	for <freebsd-questions@freebsd.org>;
	Thu,  9 Oct 2008 13:33:16 +0000 (UTC)
	(envelope-from jeremyhooks@googlemail.com)
Received: by ug-out-1314.google.com with SMTP id m2so828992uge.39
	for <freebsd-questions@freebsd.org>;
	Thu, 09 Oct 2008 06:33:12 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
	d=googlemail.com; s=gamma;
	h=domainkey-signature:received:received:message-id:date:from:to
	:subject:cc:in-reply-to:mime-version:content-type:references;
	bh=3KKXk7yMXopuy5czJkfHCc7fsHnO+GYoHb1oo4IjzN8=;
	b=LAXTmfkko1nV2O/WcHAuj2wW2m19w+KToCN9WupTnNLJxnk3F9hD8DpUhrQpNbXKCM
	fEKAsc1CwtY8jd9CfzSCFGOo6eEBshObZKhr35By3p3pz15oxtc0pFd4WkAxR46TEB0O
	NzAS10eYG3heox8DOz269pHvOA0XIYZuJjQCY=
DomainKey-Signature: a=rsa-sha1; c=nofws; d=googlemail.com; s=gamma;
	h=message-id:date:from:to:subject:cc:in-reply-to:mime-version
	:content-type:references;
	b=M7W0EC538iJk1HPI8hcjITBDA152rI+t2U64B8MJ65iS9/Z/F0K/h29U+GR0vi+qqf
	cZKphz8HX2Go9YZUuZEI90yNgScIR2E7Lbv5FpCO8sXRy4B3yGVZvrenh15dmj3IHrJb
	lsDG/lYeGmMCUJ52W92uXXeLY7C3PMRl92Ktg=
Received: by 10.210.105.19 with SMTP id d19mr92833ebc.135.1223559192821;
	Thu, 09 Oct 2008 06:33:12 -0700 (PDT)
Received: by 10.210.82.9 with HTTP; Thu, 9 Oct 2008 06:33:12 -0700 (PDT)
Message-ID: <bf2fbe6d0810090633vded063ch855565074cf7d22c@mail.gmail.com>
Date: Thu, 9 Oct 2008 14:33:12 +0100
From: "Jeremy Hooks" <jeremyhooks@googlemail.com>
To: "Martin McCormick" <martin@dc.cis.okstate.edu>
In-Reply-To: <200810082054.m98KsJhR018475@dc.cis.okstate.edu>
MIME-Version: 1.0
References: <200810082054.m98KsJhR018475@dc.cis.okstate.edu>
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
X-Content-Filtered-By: Mailman/MimeDel 2.1.5
Cc: freebsd-questions@freebsd.org
Subject: Re: Can an Account be Locked out for ssh but allow su?
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 09 Oct 2008 13:33:17 -0000

Personally I prefer AllowUsers, as that denies all users except those
specifically allowed.  Deny/AllowGroups are useful too.

2008/10/8 Martin McCormick <martin@dc.cis.okstate.edu>

> Henrik Hudson writes:
> > Check the sshd_config man page for AllowUsers and DenyUsers directives.
>
> Many thanks. DenyUsers did the trick.
> _______________________________________________
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "
> freebsd-questions-unsubscribe@freebsd.org"
>