Re: Question restricting ssh access for some users only
From: Mark Ogden (ogden_at_eng.utah.edu)
Date: Thu, 7 Oct 2004 12:06:30 -0600 To: Volker Kindermann <email@example.com>
Volker Kindermann on Thu, Oct 07, 2004 at 07:54:17PM +0200 wrote:
> Hi Jim,
> > I've used ssh as a secure telnet up to now but done little else with
> > it. The FreeBSD machines I look after on our internet-facing network
> > all have one account which I connect to for administration. I've set
> > up /etc/hosts.allow on all the machines to only allow ssh from a
> > limited internal network range.
> > Now I want to create a new account on one machine which will be
> > accessible from the Internet as a whole, to be used for tunnelling of
> > SMTP and POP3. I can't predict what the client IP address will be so I
> > will have to remove the hosts.allow restriction.
> have you considered the "AllowGroups" and "AllowUsers" directives of
> sshd_config? They should provide exact the functionality that you want.
But what if you have 1000 users? From my understanding you would have
to add all users to the AllowUsers list.
firstname.lastname@example.org mailing list
To unsubscribe, send any mail to "email@example.com"