Re: Can an Account be Locked out for ssh but allow su?

2008-10-09 Thread Jeremy Hooks
Personally I prefer AllowUsers, as that denies all users except those specifically allowed. Deny/AllowGroups are useful too. 2008/10/8 Martin McCormick [EMAIL PROTECTED] Henrik Hudson writes: Check the sshd_config man page for AllowUsers and DenyUsers directives. Many thanks. DenyUsers did

Can an Account be Locked out for ssh but allow su?

2008-10-08 Thread Martin McCormick
Is there a way to configure an account such that one can su - this-account from another login on the system, but not ssh directly in to it from the outside, similar to the way root works if you set the terminal type in /etc/ttys to insecure? The idea is to make a common place for

Re: Can an Account be Locked out for ssh but allow su?

2008-10-08 Thread Henrik Hudson
On Wednesday 08 October 2008, Martin McCormick [EMAIL PROTECTED] sent a missive stating: Is there a way to configure an account such that one can su - this-account from another login on the system, but not ssh directly in to it from the outside, similar to the way root works if you set

Re: Can an Account be Locked out for ssh but allow su?

2008-10-08 Thread Martin McCormick
Henrik Hudson writes: Check the sshd_config man page for AllowUsers and DenyUsers directives. Many thanks. DenyUsers did the trick. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To