From c5774b1dacb5c4bc67d2bf6f63ed92a296923220 Mon Sep 17 00:00:00 2001 From: Christian Poessinger Date: Sun, 13 May 2018 14:10:15 +0200 Subject: T632: use multi node for SSH allow/deny users and groups --- interface-definitions/ssh.xml | 54 ++++++++++++++++++++++++++----------------- 1 file changed, 33 insertions(+), 21 deletions(-) (limited to 'interface-definitions/ssh.xml') diff --git a/interface-definitions/ssh.xml b/interface-definitions/ssh.xml index f898f3934..7b16939c6 100644 --- a/interface-definitions/ssh.xml +++ b/interface-definitions/ssh.xml @@ -13,29 +13,41 @@ - SSH user/group access controls. Directives are processed in this: deny-users, allow-users, deny-groups and allow-groups + SSH user/group access controls. Directives are processed in this: deny-users, allow-users, deny-groups and allow-groups - - - Configure sshd_config access control for allowed groups - - - - - Configure sshd_config access control for allowed users - - - - - Configure sshd_config access control for disallowed groups - - - - - Configure sshd_config access control for disallowed users - - + + + + + Login is allowed for users whose primary or supplementary group matches + + + + + + Login is allowed only for user names that match + + + + + + + + + + Login is disallowed for users whose primary or supplementary group matches + + + + + + Login is disallowed for user names that match + + + + + -- cgit v1.2.3