LinuxQuestions.org
Support LQ: Use code LQ3 and save $3 on Domain Registration
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Software
User Name
Password
Linux - Software This forum is for Software issues.
Having a problem installing a new program? Want to know which application is best for the job? Post your question in this forum.

Notices

Reply
 
Search this Thread
Old 08-02-2007, 04:59 AM   #1
wolfipa
LQ Newbie
 
Registered: May 2004
Location: Austria
Distribution: Fedora Ubuntu OpenSuse
Posts: 26

Rep: Reputation: 15
sshd_config allowusers allowgroups


Hi there,

i want to setup more security for ssh server and just started playing around with the configuration file.
I added the definitions AllowUsers & AllowGroups to that file specifying a certain user and a group.
The tricky thing of it is, that i added a user to the configuration which is not member of the configured group:

sshd_config:
AllowUsers abcd
AllowGroups admin

Now the problem is that the system doesn't allow login to the server with the error message:
User wxyz not allowed because not listed in AllowUsers --> but wxyz is member of admin group

Any idea? Is this normal behavior?

Greets
 
Old 08-02-2007, 05:34 AM   #2
w3bd3vil
Senior Member
 
Registered: Jun 2006
Location: Hyderabad, India
Distribution: Fedora
Posts: 1,189

Rep: Reputation: 49
this works like this,
cat /etc/group
Quote:
admin:x:504mair3
loc3l:x:505mair1
cat /etc/ssh/sshd_config
Quote:
AllowUsers omair1 omair3
AllowGroups admin
in this case omair3 will only be allowed to login.
I hope you get the idea.
 
Old 08-02-2007, 05:59 AM   #3
wolfipa
LQ Newbie
 
Registered: May 2004
Location: Austria
Distribution: Fedora Ubuntu OpenSuse
Posts: 26

Original Poster
Rep: Reputation: 15
ok. thanks for the info. i understand now that both work together

Maybe you can help me with another issue:
I've setup key authentication for remote users which works fine.

Is there a way to send notifications to somebody who tries to login? I'm using the banner function - but this information is sent to everybody.

any idea? thanks in advance!
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
sshd_conf AllowUsers access jschiwal Linux - Security 5 11-18-2013 03:02 AM
editing sshd_config in ipcop 1.4.2 insurin Linux - Security 5 03-18-2005 06:28 PM
AllowUsers in sshd_config Won't Use IP Range lnxconvrt Linux - Security 4 11-28-2004 11:28 PM
quick sshd_config question slug420 Linux - Security 1 08-10-2004 11:39 AM
sshd_config eyt Linux - Newbie 2 02-19-2004 12:05 PM


All times are GMT -5. The time now is 03:56 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration