Re: [Samba] How to control who can log into the samba box

2006-02-21 Thread Gordon Messmer
David Shapiro wrote: I have samba set up using winbind so that I can ssh into the box with my DOMAIN\mylogin. That's great...kind of. How do I control which users can login to the box? I usually do that by reconfiguring sshd for key-only authentication (that is, disable password based

Re: [Samba] How to control who can log into the samba box

2006-02-21 Thread David Shapiro
Do you have an example of the hide/veto option you used and sshd_config mod you did to do this? David David Shapiro Unix Team Lead 919-765-2011 Gordon Messmer [EMAIL PROTECTED] 2/21/2006 12:01:32 PM David Shapiro wrote: I have samba set up using winbind so that I can ssh into the box

Re: [Samba] How to control who can log into the samba box

2006-02-21 Thread Josh Kelley
On 2/20/06, David Shapiro [EMAIL PROTECTED] wrote: I have samba set up using winbind so that I can ssh into the box with my DOMAIN\mylogin. That's great...kind of. How do I control which users can login to the box? As it stands now, all users in DOMAIN can log in, which is not desireable.

RE: [Samba] How to control who can log into the samba box

2006-02-21 Thread Parker, Michael
To: samba@lists.samba.org Subject: [Samba] How to control who can log into the samba box Hello, I have samba set up using winbind so that I can ssh into the box with my DOMAIN\mylogin. That's great...kind of. How do I control which users can login to the box? As it stands now, all users in DOMAIN

Re: [Samba] How to control who can log into the samba box

2006-02-21 Thread Gordon Messmer
David Shapiro wrote: Do you have an example of the hide/veto option you used and sshd_config mod you did to do this? In smb.conf, you can use: veto files = /.ssh/ In sshd_config, you can set: PasswordAuthentication no Make sure you've put keys for your own account on the system, and are

[Samba] How to control who can log into the samba box

2006-02-20 Thread David Shapiro
Hello, I have samba set up using winbind so that I can ssh into the box with my DOMAIN\mylogin. That's great...kind of. How do I control which users can login to the box? As it stands now, all users in DOMAIN can log in, which is not desireable. Do I need to map domain groups to unix