root remote access allowance for some users@machines

From: Jacek M. Holeczek (holeczek_at_us.edu.pl)
Date: 09/30/04 

Date: Thu, 30 Sep 2004 15:21:09 +0200

Hi,
In order to "deny" the remote/network root access at all, I can set in the
/etc/ssh/sshd_config file :
        PermitRootLogin no
or I can set in the /etc/pam.d/sshd file :
        auth required /lib/security/pam_securetty.so
However, I would like to "allow" some users (maybe only user "root", if
that matters) FROM some machines to be still able to login as "root"
remotely on some other machines (while all other users from other machines
should not be able to login as "root" remotely).
For the moment, I haven't found any good solution.
Any ideas?
Thanks in advance,
Best regards,
Jacek.

Relevant Pages