From owner-freebsd-questions Wed Oct 6 14: 6:37 1999 Delivered-To: freebsd-questions@freebsd.org Received: from granite.sentex.net (granite.sentex.ca [199.212.134.1]) by hub.freebsd.org (Postfix) with ESMTP id 35A00152A1 for ; Wed, 6 Oct 1999 14:06:26 -0700 (PDT) (envelope-from mike@sentex.net) Received: from simoeon (simeon.sentex.ca [209.112.4.47]) by granite.sentex.net (8.8.8/8.6.9) with SMTP id RAA15669; Wed, 6 Oct 1999 17:06:22 -0400 (EDT) Message-Id: <3.0.5.32.19991006170517.01561660@staff.sentex.ca> X-Sender: mdtpop@staff.sentex.ca X-Mailer: QUALCOMM Windows Eudora Light Version 3.0.5 (32) Date: Wed, 06 Oct 1999 17:05:17 -0400 To: Joseph Scott From: Mike Tancsa Subject: Re: login.access and sshd Cc: questions@FreeBSD.ORG In-Reply-To: <37FBB487.6AC8B32F@owp.csus.edu> References: <3.0.5.32.19991006131601.019cca20@staff.sentex.ca> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG At 08:43 PM 10/6/99 +0000, Joseph Scott wrote: > >Mike Tancsa wrote: >> >> Is there any way to get sshd honour login.access ? Or at least control who >> is and is not allowed to login on a per user or group basis ? > >>From man sshd, under the CONFIGURATION FILE section : > > AllowGroups >This should do what you are asking, however I could see having sshd >respect login.access make sense, that way you only have configure access >control in place. > Thanks. On the box I was working on, it had ssh2 installed as well as the old one, but I neglected to look at the man pages for sshd1 to see those options. When logging in via ssh1, it does honour the AllowUsers and Denyusers setup I have installed. But if the client is using V2, it does not seem to honour that setting ? I have them in both config files. ---Mike ------------------------------------------------------------------------ Mike Tancsa, tel 01.519.651.3400 Network Administrator, mike@sentex.net Sentex Communications www.sentex.net Cambridge, Ontario Canada To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message