Re: How to PREVENT a user from logging in through SSH

On 2008-04-09, Ignoramus22864 <ignoramus22864@xxxxxxxxxxxxxxxxxxxx> wrote:
On 2008-04-09, Jurgen Haan <jurgen@xxxxxxxx> wrote:
Ignoramus10392 wrote:
[...]
I would like to disable any remote SSH logins for these users.
[...]
Give them a non-usable shell.
/bin/false or /bin/nologin

Um, these users NEED to log in, just not from SSH. They need to log in
from GDM.

If you're using OpenSSH, list them in DenyUsers in sshd_config.

--
Darren Tucker (dtucker at zip.com.au)
GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4 37C9 C982 80C7 8FF4 FA69
Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.
.

Relevant Pages

  • Re: Block ssh login prompt for *.kr *.jp etc.
    ... >Is DenyHosts in OpenSSH, ... OpenSSH's sshd doesn't have a DenyHosts but its DenyUsers has an optional ... Good judgement comes with experience. ...
    (comp.security.ssh)
  • Re: tcsetpgrp()
    ... Which SSH implementation and version thereof are you running? ... On QNX the pty allocation process apparently ... In the next release of OpenSSH, ... Good judgement comes with experience. ...
    (comp.security.ssh)
  • Re: SSH Connecting through Firewall
    ... >client to use HTTPS or FTP proxy. ... There is no such option in the OpenSSH ... Good judgement comes with experience. ...
    (comp.security.ssh)
  • Re: Adding "X11UseLocalhost no" to /etc/ssh/sshd_config breaks x forwarding
    ... telnet: Unable to connect to remote host: Connection refused ... has been turned off either by Openssh or by Red Hat. ... feature or a bug I am unsure, there are warnings in the man page ... Good judgement comes with experience. ...
    (SSH)
  • Re: Solaris 9 sshd<---> Cygwin/X ssh Problems
    ... >uses a Solaris box as an sshd server? ... I don't know if this exists in SunSSH but for OpenSSH this can be caused ... Good judgement comes with experience. ...
    (comp.security.ssh)