Hi,

Carlos Eduardo Pedroza Santiviago schrieb:
>> People (only 3) who can login via SSH already have "real" user accounts
>>  in /etc/passwd etc.
You don`t need to create special "real" user accounts, like you call them.
Restrict sshd with AllowGroups, AllowUsers, DenyGroups and/or DenyUsers.
Also you can set the "loginShell"-attribute in LDAP to /bin/false for
users who don`t need a shell.

Best regards
Marc


-- 
Marc Muehlfeld
Zentrum fuer Humangenetik und Laboratoriumsmedizin Dr. Klein und Dr. Rost
Lochhamer Str. 29 - D-82152 Martinsried
Telefon: +49(0)89/895578-0 - Fax: +49(0)89/895578-78
http://www.medizinische-genetik.de


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Reply via email to