topic Re: Disable specific user from ssh in Operating System - HP-UX

Disable specific user from ssh

yulianto piyut — Fri, 12 Dec 2008 04:03:34 GMT

all,

How to restrict specific user from ssh? for example, i want to disable user apps to login to my server using ssh.

thx,
-yut-

Re: Disable specific user from ssh

Johnson Punniyalingam — Fri, 12 Dec 2008 04:16:16 GMT

Change the shell of the user apps to false

Example :-

app11:CALxgC.hv4zjQ:109:107:,,,:/home/ibmadm1:/usr/bin/sh

Change to

apps1:CALxgC.hv4zjQ:109:107:,,,:/home/ibmadm1:/usr/bin/false

Thanks,
Johnson

Re: Disable specific user from ssh

yulianto piyut — Fri, 12 Dec 2008 04:46:19 GMT

If the shell changed to false, user can not ftp to server. how?

Re: Disable specific user from ssh

Johnson Punniyalingam — Fri, 12 Dec 2008 04:56:57 GMT

If the shell changed to false, user can not ftp to server. how?

ftp to server. doesn't require's shell, something like anonymous ftp account

Thanks,
Johnon

Re: Disable specific user from ssh

Johnson Punniyalingam — Fri, 12 Dec 2008 04:59:44 GMT

Also can you check configuration file /opt/ssh/etc/ssh_config

When an ssh client connection request is made, the server first responds with its list of supported authentication methods. This list represents the authentication methods supported by the sshd server and the sequence in which these methods will be tried. The client can omit one or more of those authentication methods. The client can also change the sequence in which the methods are attempted. You achieve this with a configuration directive in the client configuration file, /opt/ssh/etc/ssh_config.

Re: Disable specific user from ssh

yulianto piyut — Fri, 12 Dec 2008 05:42:34 GMT

thx! no rule of anonymous account used for ftp in my system. I have tried to change the shell to false and try to ftp but failed. To solve it, i create /etc/shells file and put /usr/bin/false, /usr/bin/ksh, /sbin/sh.

Re: Disable specific user from ssh

Johnson Punniyalingam — Fri, 12 Dec 2008 05:50:33 GMT

Excellent and Well done ..:)

Thanks,
Johnson