Would like to restrict ssh access to specific users

Ramon F Herrera <ramon DeleteThis @conexus.net> writes:

> Other than hacking the source code, is there any way to restrict
> access through ssh to some specified user (for instance, moi)?

Yes, via the AllowUsers option in the /etc/ssh/sshd_config file.
--
% Randy Yates % "She's sweet on Wagner-I think she'd die for Beethoven.
%% Fuquay-Varina, NC % She love the way Puccini lays down a tune, and
%%% 919-577-9882 % Verdi's always creepin' from her room."
%%%% <yates DeleteThis @ieee.org> % "Rockaria", *A New World Record*, ELO
http://home.earthlink.net/~yatescr

Ramon F Herrera wrote:
>
> Other than hacking the source code, is there any way to restrict
> access through ssh to some specified user (for instance, moi)?

group access?

--
<http://www.cs.auckland.ac.nz/~pgut001/pubs/vista_cost.txt>
<http://www.securityfocus.com/columnists/423>
<http://www.aaxnet.com/editor/edit043.html>
<http://kadaitcha.cx/vista/dogsbreakfast/index.html>
cbfalconer at maineline dot net



--
Posted via a free Usenet account from http://www.teranews.com

Ramon F Herrera <ramon DeleteThis @conexus.net> writes:

> Other than hacking the source code, is there any way to restrict
> access through ssh to some specified user (for instance, moi)?
>
> TIA,
>
> -Ramon
>

Read the first hit from google for

"ssh restrict users"

http://aplawrence.com/SCOFAQ/FAQ_scotec4sshdusers.html


--

On May 27, 7:22 pm, Ramon F Herrera <r... RemoveThis @conexus.net> wrote:
> Other than hacking the source code, is there any way to restrict
> access through ssh to some specified user (for instance, moi)?
>
> TIA,
>
> -Ramon

Set the shell in the /etc/passwd file to be /bin/false
FTP login should still work but you should verify.

mike RemoveThis @surgeontech.com

On Fri, 06 Jul 2007 16:30:09 -0700, "mike wrote:

> On May 27, 7:22 pm, Ramon F Herrera <r....RemoveThis@conexus.net> wrote:
>> Other than hacking the source code, is there any way to restrict
>> access through ssh to some specified user (for instance, moi)?
>>
>> TIA,
>>
>> -Ramon
>
> Set the shell in the /etc/passwd file to be /bin/false
> FTP login should still work but you should verify.
>
> mike.RemoveThis@surgeontech.com


Or you could just allow selected users...

SSHD_CONFIG(5) BSD File Formats Manual SSHD_CONFIG(5)

NAME
sshd_config - OpenSSH SSH daemon configuration file

SYNOPSIS
/etc/ssh/sshd_config

DESCRIPTION
[...]
AllowUsers
This keyword can be followed by a list of user name patterns, separated by
spaces. If specified, login is allowed only for user names that match one of
the patterns. '*' and '?' can be used as wildcards in the patterns. Only
user names are valid; a numerical user ID is not recognized. By default,
login is allowed for all users. If the pattern takes the form USER@HOST then
USER and HOST are separately checked, restricting logins to particular users
from particular hosts.