Re: [CentOS] SSH AllowUser WildCard

2011-02-08 Thread Stephen Cox
Host xxx.xxx.xxx.xxx: xxx.xxx.xxx.xxx.in-addr.arpa domain name pointer AA-xxx-xxx-xxx-xxx..host.com Stephen On Tue, Feb 8, 2011 at 8:08 AM, Cameron Kerr came...@humbledown.org wrote: I think you need to do a 'host the-ip-address' to see what the reverse DNS is doing; that seems to be

Re: [CentOS] SSH AllowUser WildCard

2011-02-08 Thread R - elists
-Original Message- From: centos-boun...@centos.org [mailto:centos-boun...@centos.org] On Behalf Of Stephen Cox Sent: Monday, February 07, 2011 9:37 PM To: CentOS mailing list Subject: Re: [CentOS] SSH AllowUser WildCard It didnt work. Here is the logs: Feb 7 18:17:25

Re: [CentOS] SSH AllowUser WildCard

2011-02-08 Thread Gordon Messmer
On 02/07/2011 09:37 PM, Stephen Cox wrote: Feb 7 18:17:25 server sshd[3537]: reverse mapping checking getaddrinfo for AA-xxx-xxx-xxx-xxx..host.com failed - POSSIBLE BREAKIN ATTEMPT! That message indicates that the IP address from which you're connecting has a PTR record of

Re: [CentOS] SSH AllowUser WildCard

2011-02-08 Thread Stephen Cox
On Tue, Feb 8, 2011 at 6:52 PM, Gordon Messmer yiny...@eburg.com wrote: You'll need to set up DNS properly for this to work. It is mobile Broadband... So that will not be not possible. -- Stephen Cox ___ CentOS mailing list CentOS@centos.org

Re: [CentOS] SSH AllowUser WildCard

2011-02-08 Thread Ned Slider
On 08/02/11 18:13, Stephen Cox wrote: On Tue, Feb 8, 2011 at 6:52 PM, Gordon Messmeryiny...@eburg.com wrote: You'll need to set up DNS properly for this to work. It is mobile Broadband... So that will not be not possible. Is there a reason you have to include the host part? Why can't you

Re: [CentOS] SSH AllowUser WildCard

2011-02-08 Thread Gordon Messmer
On 02/08/2011 10:13 AM, Stephen Cox wrote: On Tue, Feb 8, 2011 at 6:52 PM, Gordon Messmeryiny...@eburg.com wrote: You'll need to set up DNS properly for this to work. It is mobile Broadband... So that will not be not possible. Then I guess the answer is that OpenSSH works and your provider's

Re: [CentOS] SSH AllowUser WildCard

2011-02-07 Thread Stephen Cox
Ned, thanks but I also can read the man page. My question is what would an entry be if the user bob can login from 17363.myhost.com and 2373.myhost.com? Stephen On Mon, Feb 7, 2011 at 8:49 AM, Ned Slider n...@unixmail.co.uk wrote: On 07/02/11 06:08, Stephen Cox wrote: Is it possible to allow

Re: [CentOS] SSH AllowUser WildCard

2011-02-07 Thread Cameron Kerr
On 7/02/2011, at 9:06 PM, Stephen Cox wrote: Ned, thanks but I also can read the man page. My question is what would an entry be if the user bob can login from 17363.myhost.com and 2373.myhost.com? It would be reasonable to try bob@*.myhost.com Did you try it?

Re: [CentOS] SSH AllowUser WildCard

2011-02-07 Thread Stephen Cox
Cameron, Yes I did and I will test it later today. Thank you! On Mon, Feb 7, 2011 at 10:30 AM, Cameron Kerr came...@humbledown.org wrote: On 7/02/2011, at 9:06 PM, Stephen Cox wrote: Ned, thanks but I also can read the man page. My question is what would an entry be if the user bob can

Re: [CentOS] SSH AllowUser WildCard

2011-02-07 Thread Stephen Cox
It didnt work. Here is the logs: Feb 7 18:17:25 server sshd[3537]: reverse mapping checking getaddrinfo for AA-xxx-xxx-xxx-xxx..host.com failed - POSSIBLE BREAKIN ATTEMPT! Feb 7 18:17:25 server sshd[3537]: User root from xxx.xxx.xxx.xxx not allowed because not listed in AllowUsers But my

Re: [CentOS] SSH AllowUser WildCard

2011-02-07 Thread Cameron Kerr
I think you need to do a 'host the-ip-address' to see what the reverse DNS is doing; that seems to be what is causing the problem. On 8/02/2011, at 6:37 PM, Stephen Cox wrote: It didnt work. Here is the logs: Feb 7 18:17:25 server sshd[3537]: reverse mapping checking getaddrinfo for

[CentOS] SSH AllowUser WildCard

2011-02-06 Thread Stephen Cox
Is it possible to allow a user to login from an changing hostname like: username@*hoststringfixed.com -- Stephen Cox ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] SSH AllowUser WildCard

2011-02-06 Thread Ned Slider
On 07/02/11 06:08, Stephen Cox wrote: Is it possible to allow a user to login from an changing hostname like: username@*hoststringfixed.com man sshd_config AllowUsers This keyword can be followed by a list of user name patterns, separated by spaces. If specified, login is allowed only for