Thanks, Pat.  That was what I needed.

authconfig --enablepamaccess --update



On 07/11/2011 03:07 PM, Patrick Riehecky wrote:
On 07/11/2011 03:06 PM, Ken Teh wrote:
Which pam module consults /etc/security/access.conf? I have a deny clause in it 
but it doesn't seem to work.

In /var/log/secure, I see a

<hostname> sshd[1879]: pam_sss(sshd:auth): authentication success...
<hostname> sshd[1879]: Accepted password for ...
<hostname> sshd[1879]: pam_unix(sshd:session): session opened for user ...

Should be pam_access.

Is it possible to see your access.conf and the full pam file for sshd?

Pat

Reply via email to