sshd

[ramsam]

I have sshd on a linux box.

I have 2 users
1)ramsam 2) filetp

both these users can ssh into the box
but i need to restrict filetp user from sshing but filetp needs to be able to ftp

I tried to put the entry AllowUsers/DenyUsers in the sshd_config file and restarted the service.

It dosent seem to work.

Please help !!!

[GNU-Fan]

I have

AllowUsers ramsam
DenyUsers filetp

in my server's /etc/ssh/sshd_config file.

This works on Debian Etch.

[ramsam]

Hey GNU-Fan
I am on uBuntu ver 7.10

I did
AllowUsers ramsam
DenyUsers filetp

in the /etc/ssh/sshd_conf FILE
and restarted sshd

It does not resolve my issue.
filetp user still can log in.

[Geeth]

have you restarted the ssh daemon?

[matonb]

You may want to have a look at rssh which is a restricted ssh shell

[GNU-Fan]

I do not think switching to rssh would be such a good idea here before the problem with OpenSSHD is solved.

SSHD can be configured to not allow logins and if it, for whatever reason, does not work, this program might be even be broken/corrupted. A misconfigured SSHD is a serious issue and if it shows other than expected behaviour you had better find the cause.

[Freston]

It may not be the source of your problem, but for good measure did you turn off protocol 1 logins in sshd_config (only allow protocol 2)? And did you delete ~filetp/.ssh/known_hosts??

[raghaven.kumar]

IMO, there are two configs reagrding ssh
sshd_config and ssh_config
try ssh_config.

[GNU-Fan]

But ssh_config configures only the client while this is a server issue, isn't it?

[ramsam]

have you restarted the ssh daemon?
Yes I restarted ssh but allow and deny dosent work
I even rebooted the box still not working.

You may want to have a look at rssh which is a restricted ssh shell
rssh I will look at but sshd should work coz its jsut adding 2 lines. RSSH will be my next tool to tinker with.



did you turn off protocol 1 logins in sshd_config (only allow protocol 2)? And did you delete ~filetp/.ssh/known_hosts??

I left the sshd_config as default but I dont know what protocol was on.

IMO, there are two configs reagrding ssh
sshd_config and ssh_config
try ssh_config.

ssh_config i believe there was nothing in there or i may be wrong.
Need to check it. Dont have access to the system right now.