Re: Accepting only known clients to connect using ssh

From: Jorey Bump (devnull@joreybump.com)
Date: 07/31/02 

From: Jorey Bump <devnull@joreybump.com>
Date: Wed, 31 Jul 2002 12:53:55 GMT

Bengt Bäverman wrote:

> Hello,
>
> I have looked in several places but cannot find a way of only accepting
> clients, connecting using ssh, whos public keys I know of already. If a
> client is not already known it should be rejected. I want this to be
> globally defined for the whole server, and not user specific. How di I
> configure sshd correctly to get this functionality?
>
> Today when a new client connects it is accepted as long as the correct
> username/password is supplied, but this is not enough for me. I want only
> a controlled few to be able to connect to my server.

The easiest way is to add this to /etc/ssh/sshd_config:

# only these users are allowed to ssh (for now)
AllowUsers bob ted alice
# no login allowed for root - use su, instead
PermitRootLogin no

This allows fine control over which users should be allowed to ssh.

Relevant Pages

  • Multiple issues with Mac OS X AFP client
    ... Multiple issues with Mac OS X AFP client ... connections to an Apple file server over SSH - a commendable effort to ... .GlobalPreferences.plist (the AFP client does not follow Apple's ...
    (Bugtraq)
  • [Full-Disclosure] Multiple issues with Mac OS X AFP client
    ... Multiple issues with Mac OS X AFP client ... connections to an Apple file server over SSH - a commendable effort to ... .GlobalPreferences.plist (the AFP client does not follow Apple's ...
    (Full-Disclosure)
  • Multiple issues with Mac OS X AFP client
    ... Multiple issues with Mac OS X AFP client ... connections to an Apple file server over SSH - a commendable effort to ... .GlobalPreferences.plist (the AFP client does not follow Apple's ...
    (Full-Disclosure)
  • Re: Explanation of SSH
    ... I am still unclear on how SSH works exactly. ... Client issues SSH command and names server ... "Shopper" says "server sends back its public host and server keys ... Surely there is only one public key it sends ...
    (comp.security.ssh)
  • Re: Remote X over rsh
    ... all I'm doing is running X and ssh. ... the weak machine is the one where on he wishes to display, ... Possibly the "my client" confused the issue; ... just use X without ssh forwarding. ...
    (comp.os.linux.x)
Quantcast