Date: Fri, 30 Nov 2001 15:21:47 -0500 From: "Brent" <misterb@cybertours.com> To: "Glenn Johnson" <gjohnson@srrc.ars.usda.gov>, <questions@FreeBSD.ORG> Subject: Re: ssh does not honor the nologin file Message-ID: <008301c179dc$a3ce5920$d02b82d0@Misterb> References: <20011130134050.A1933@node7.cluster.srrc.usda.gov>
next in thread | previous in thread | raw e-mail | index | archive | help
you can specify what users OR groups can login using ssh by editing the following file. /etc/ssh/sshd.config at the bottom of the file ..add something like AllowGroups groupname <------this will only allow users from whatever group you want to login AllowUsers username <-------this will allow whatever user you want to login. for example i have AllowGroups wheel <----this only allows users from the wheel group to login ( only me ) hope this helps ya Brent ----- Original Message ----- From: "Glenn Johnson" <gjohnson@srrc.ars.usda.gov> To: <questions@FreeBSD.ORG> Sent: Friday, November 30, 2001 2:40 PM Subject: ssh does not honor the nologin file > The sshd manual says that sshd checks for /etc/nologin and > /var/run/nologin and if either is found, the login is not allowed. This > does not work. I have tried with the nologin file present in both /etc > and /var/run but users can still login via ssh. I would like to be > able to temporarily disable all logins via ssh from the outside. I can > not simply kill the daemon because I need ssh on the inside network. > According to the man page for sshd this should "just work". Does any > one have any ideas? > > Thanks. > > -- > Glenn Johnson > USDA, ARS, SRRC Phone: (504) 286-4252 > New Orleans, LA 70124 e-mail: gjohnson@srrc.ars.usda.gov > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-questions" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?008301c179dc$a3ce5920$d02b82d0>