This is the mail archive of the
cygwin
mailing list for the Cygwin project.
sshd_conf and local groups
- From: "Wes S" <wess at acegroup dot cc>
- To: cygwin at cygwin dot com
- Date: Sat, 31 Dec 2005 17:28:41 -0500
- Subject: sshd_conf and local groups
I'm trying to lock down ssh access. I use exim for a mail server so
I have a bunch of accounts on my w2k box. I don't want most to be
able to use ssh.
So reading the man file for sshd_config I added to the following
entry to sshd_config:
#wrs 20051231 restrict email only nt accounts from ssh
AllowGroups ssh_allow
I added a local group using administration / computer management
I imported into my /etc/group file:
ssh_allow:S-1-5-21-1801674531-688789844-1060284298-1007:1007:
Windows shows it as:
C:\Documents and Settings\Administrator>net localgroup
Aliases for \\BAREFOOT
-------------------------------------------------------------------------------
*Administrators *Backup Operators *Guests
*Power Users *Replicator *ssh_allow
*Test *Users
The command completed successfully.
Attempting to ssh into my pc:
Administrator@barefoot ~
$ ssh -l administrator 127.0.0.1
administrator@127.0.0.1's password:
Permission denied, please try again.
administrator@127.0.0.1's password:
Commenting out AllowGroups ssh_allow and restarting sshd lets me log
in just fine.
A clue would be welcome. The install was updated after I ran into
these problems at 14:30 Eastern today.
Thanks in advance,
Wes S
--
Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple
Problem reports: http://cygwin.com/problems.html
Documentation: http://cygwin.com/docs.html
FAQ: http://cygwin.com/faq/