RE: Disable ssh access to some users

From: Leece, Doug (Doug.Leece_at_bell.ca)
Date: 11/20/03

  • Next message: Wilson, Richard E: "RE: ssh read password from stdin"
    Date: Thu, 20 Nov 2003 10:37:13 -0700
    To: Bård Tommy Nilsen <bardtomm@fjord-data.no>, <secureshell@securityfocus.com>
    
    

    Hello,

    We have had to restrict certain users from logging in directly and this is
    how we did it. Under the authentication section in the sshd_config file add a
    line to deny users like this:

    -----------------------------------------
    # Authentication:

    #LoginGraceTime 600
    PermitRootLogin no
    DenyUsers foo bill sally alfred <----
    #StrictModes yes
    -------------------------------------

    You can also restrict users at the group level but note that this does not
    stop anyone from logging in as themselves and SU'ing to the user that is not
    allowed in,( assuming they know the password).

    Hope that helps.
    Doug Leece
    Calgary Alberta

    -----Original Message-----
    From: Bård Tommy Nilsen [mailto:bardtomm@fjord-data.no]
    Sent: Thursday, November 20, 2003 12:27 AM
    To: secureshell@securityfocus.com
    Subject: Disable ssh access to some users

     
    Hello

    Is it possible to disable ssh access to some users ??
    How ??

    Regards
    Bård Tommy Nilsen


  • Next message: Wilson, Richard E: "RE: ssh read password from stdin"

    Relevant Pages

    • Re: IAS suddenly stopped working for some time and then magically
      ... related to the failing of authentication if the SQL transaction fails. ... You've indicated that if both text logging and sql ... sql logging alone. ... a configuration issue related to the above authentication failure even ...
      (microsoft.public.internet.radius)
    • RE: SMTP Stopped working
      ... I have turned on all of the logging and it turns out that there is an authentication problem. ... > NCSA) on the SMTP Virtual Server. ...
      (microsoft.public.exchange.connectivity)
    • Technique for centralized web service authentication, logging, etc.
      ... (authentication, logging, exception handling). ... private delegate ReturnType GetSomeDataImplDelegate(SomeType param1); ...
      (microsoft.public.dotnet.framework.aspnet)
    • Re: user setup question
      ... > You can restrict the user to logging in only from the console, ... > or to logging in only locally. ... A quick Google revealed that sshd doesn't honor the login.access by ... Shouldn't all shell access methods honor any ...
      (freebsd-questions)
    • Re: Login Problems
      ... The user/password popup login ... They are logging in correctly with just name ... >> We have IIS set to basic authentication for the site ...
      (microsoft.public.sharepoint.windowsservices)