From owner-freebsd-security@FreeBSD.ORG  Fri Oct  8 14:28:54 2004
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 6C60A16A4CE
	for <freebsd-security@freebsd.org>;
	Fri,  8 Oct 2004 14:28:54 +0000 (GMT)
Received: from highland.isltd.insignia.com (highland.isltd.insignia.com
	[195.74.141.1])	by mx1.FreeBSD.org (Postfix) with ESMTP id BA86843D39
	for <freebsd-security@freebsd.org>;
	Fri,  8 Oct 2004 14:28:53 +0000 (GMT)
	(envelope-from subscriber@insignia.com)
Received: from dailuaine.isltd.insignia.com (dailuaine.isltd.insignia.com
	[172.16.64.11])i98ESq00018909	for <freebsd-security@freebsd.org>;
	Fri, 8 Oct 2004 15:28:52 +0100 (BST)
	(envelope-from subscriber@insignia.com)
Received: from speyburn.isltd.insignia.com (speyburn [172.16.64.16])
	i98ESqgF007135	for <freebsd-security@freebsd.org>;
	Fri, 8 Oct 2004 15:28:52 +0100 (BST)
	(envelope-from subscriber@insignia.com)
From: Jim Hatfield <subscriber@insignia.com>
To: freebsd-security@freebsd.org
Date: Fri, 08 Oct 2004 15:28:52 +0100
Organization: Insignia Solutions
Message-ID: <kp8dm054h3kcnm4chrm2gupsmospi6cnai@4ax.com>
References: <3203DF3DDE57D411AFF4009027B8C36760563C@exchange-uk.isltd.insignia.com>
In-Reply-To: <3203DF3DDE57D411AFF4009027B8C36760563C@exchange-uk.isltd.insignia.com>
X-Mailer: Forte Agent 2.0/32.640
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable
X-Scanned-By: MIMEDefang 2.44
Subject: Re: Question restricting ssh access for some users only
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Security issues [members-only posting]
	<freebsd-security.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>,
	<mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>,
	<mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 08 Oct 2004 14:28:54 -0000

On Thu, 7 Oct 2004 21:14:07 +0100 , in local.freebsd.security you
wrote:

>
>have you tried using /etc/login.access?

Hmm, looks like sshd does not consult this file!
I'm connecting as user "mis" and the client machine is
172.16.64.16 so I put this at the bottom:

+:mis:172.16.64.16

and it let me in from a different machine.

I tried adding this below:

-:ALL:ALL

but it made no difference. I did HUP sshd.

jim