Re: Using PAM for additional SSH/Console authentication

From: Ed Wilts (ewilts_at_ewilts.org)
Date: 04/29/04

  • Next message: Johnson, Shaunn: "kernel config for memory > 1 Gig?" 
    Date: Wed, 28 Apr 2004 17:27:42 -0500
To: General Red Hat Linux discussion list <redhat-list@redhat.com>

    On Wed, Apr 28, 2004 at 01:29:43PM -0700, Yagi Angrypants wrote:
    > A while ago I had configured an RH box so that ssh
    > users had to have their account names entered into a
    > text file (in addition to the "usual" requirements) in
    > order to be able to ssh into a machine.
    >
    > I can't remember how to do this now. I'd like to
    > configure a box I have now so that ssh and console
    > users need to have their accounts specificially
    > entered into additional text files to permit such
    > access. Can someone point me to a good link that
    > discusses modifying the PAM configuration to
    > accomplish this?

    The easiest way to do this is via the sshd_config file that forces users
    to be members of a group to allow the ssh login. man sshd_config and
    search for AllowGroup

    Console users are handled via /etc/securetty I think. 

    -- 
Ed Wilts, Mounds View, MN, USA
mailto:ewilts@ewilts.org
Member #1, Red Hat Community Ambassador Program
-- 
redhat-list mailing list
unsubscribe mailto:redhat-list-request@redhat.com?subject=unsubscribe
https://www.redhat.com/mailman/listinfo/redhat-list
  • Next message: Johnson, Shaunn: "kernel config for memory > 1 Gig?"

    Relevant Pages

    • Re: SSH ignores locked accounts
      ... >>By default, without specific configuration, such as putting public key ... >>to make the necessary configuration for the account to be able to log ... > True, for a new account. ... If an account is previously configured to allow ssh log on using ...
      (comp.security.ssh)
    • Re: Passing password in ssh
      ... If I create keys without a passphrase, and share the public keys between ... You do know that you first have to get the private key of the key ... The .ssh directory also ... But simply cracking into a user's account who has access to several ...
      (Fedora)
    • Re: Problems with Sudo
      ... where only one unprivileged account is allowed to log in. ... you're gaining nothing at all by running two ssh daemons ... Using odd port numbers isn't very useful either, ... I have SSH exposed to the world with key-only login and an iptables ...
      (Ubuntu)
    • Re: ssh and subsequent telnet, encrypted?
      ... >> account of mine only to launch telnet to a newsserver from ... is that telnet session (since it is embedded in the ssh ... the traffic between my shell account and the newsserver is ...
      (comp.security.ssh)
    • RE: Illegal user ssh probes
      ... the attacked account names. ... Subject: Illegal user ssh probes ... On linux the admin account could possibly lead to access on the box. ...
      (SSH)