From owner-freebsd-questions  Thu Oct 17 16:35:22 2002
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 10F8537B401
	for <freebsd-questions@FreeBSD.ORG>; Thu, 17 Oct 2002 16:35:21 -0700 (PDT)
Received: from blacklamb.mykitchentable.net (ekgr-dsl4-t113.citlink.net [207.173.249.113])
	by mx1.FreeBSD.org (Postfix) with ESMTP id A15EB43E9E
	for <freebsd-questions@FreeBSD.ORG>; Thu, 17 Oct 2002 16:35:20 -0700 (PDT)
	(envelope-from drew@mykitchentable.net)
Received: from TAGALONG (unknown [165.107.42.110])
	by blacklamb.mykitchentable.net (Postfix) with SMTP
	id CDEF7EE59E; Thu, 17 Oct 2002 16:35:19 -0700 (PDT)
Message-ID: <039201c27635$db0de3a0$6e2a6ba5@TAGALONG>
From: "Drew Tomlinson" <drew@mykitchentable.net>
To: "Scott Gerhardt" <scott@g-it.ca>,
	"FreeBSD" <freebsd-questions@FreeBSD.ORG>
References: <B9D498D3.25E1%scott@g-it.ca>
Subject: Re: Login.access restrictions
Date: Thu, 17 Oct 2002 16:35:19 -0700
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1106
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG

----- Original Message -----
From: "Scott Gerhardt" <scott@g-it.ca>
To: "FreeBSD" <freebsd-questions@FreeBSD.ORG>
Sent: Thursday, October 17, 2002 3:41 PM
Subject: Login.access restrictions


> Login.access restriction should be denying all non wheel users but:
>
> I recently created a user which is NOT in the wheel group yet they
can still
> connect via ssh.  The login.access file below should prevent this
user from
> logging in. What am I doing wrong?
>
>
> # $FreeBSD: src/etc/login.access,v 1.3 1999/08/27 23:23:42 peter Exp
$
> #
> -:ALL EXCEPT wheel:console
> -:ALL EXCEPT wheel:ALL

I vaguely remember something about ssh using a different file to limit
access.  Should be in the archives.

Good Luck,

Drew


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message