Re: account control to ssh

From: Andrew J Caines (A.J.Caines@altavista.net)
Date: 03/29/01 

Date: Thu, 29 Mar 2001 00:20:30 -0500
From: Andrew J Caines <A.J.Caines@altavista.net>
To: security@FreeBSD.ORG

George,

> How would I restrict incoming ssh connections on a per user basis ?

While others have mentioned other more general config parameters to
restrict access in a broader fashion, this is one of the two basic
functions of SSH - strong authentication, the other being encryption.

If you only allow key authentication by setting "PasswordAuthentication
no" in in/etc/ssh/sshd_config, then only the users you explicitly
authorise by putting their public key in their account's authorized_keys
or authorized_keys2 file can log in to the system.

-Andrew- 

-- 
 _______________________________________________________________________
| -Andrew J. Caines-   Unix Systems Engineer   A.J.Caines@altavista.net |
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message