SSH

From FGVwiki

Jump to: navigation, search
Important: The content of this page is outdated. If you have checked or updated this page and found the content to be suitable, please remove this notice.


The SSH access to all servers is limited to users how belong to the ssh-access group. (GID 1023)

To add a user to this group you read how to edit the LDAP user directory

Configuration

Edit /etc/ssh/sshd_config

Add AllowGroups ssh-access to the top of the file.

Restart sshd

Exception

birch is NOT configured in this manner. Reason being that the LTSP X login makes use of ssh (at least the allow groups directive) from all the terminals. To get around this we have implemented the pam.d/ssh module and then tell /etc/security/ssh to do

-:ALL EXCEPT ssh-access:ALL EXCEPT LOCAL

Personal tools