Date: Wed, 8 Oct 2008 12:22:57 -0800 From: Henrik Hudson <lists@rhavenn.net> To: freebsd-questions@freebsd.org Cc: Martin McCormick <martin@dc.cis.okstate.edu> Subject: Re: Can an Account be Locked out for ssh but allow su? Message-ID: <200810081222.58010.lists@rhavenn.net> In-Reply-To: <200810081942.m98JgvvH006080@dc.cis.okstate.edu> References: <200810081942.m98JgvvH006080@dc.cis.okstate.edu>
next in thread | previous in thread | raw e-mail | index | archive | help
On Wednesday 08 October 2008, Martin McCormick <martin@dc.cis.okstate.edu> sent a missive stating: > Is there a way to configure an account such that one can > su - this-account from another login on the system, but not ssh > directly in to it from the outside, similar to the way root > works if you set the terminal type in /etc/ttys to insecure? Check the sshd_config man page for AllowUsers and DenyUsers directives. THis should do what you want. Henrik -- Henrik Hudson lists@rhavenn.net ------------------------------ "God, root, what is difference?" Pitr; UF (http://www.userfriendly.org/)
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200810081222.58010.lists>