Re: nx and ssh restrictions?

[Trond Mæhlum <trond@maehlum.net>]

Finn-Arne Johansen skrev:

> use AllowUser(s) in /etc/ssh/sshd_config
>
> something like
> AllowUsers root@10.0.*.* nx *@localhost

Thank you Finn Arne, this seems to be what I am looking for.

However, I now have this:

AllowUsers root@172.16.*.* root@172.21.*.* nx *@localhost

It doesn't seem to work. I log in as root via ssh, and try to do ssh 
myuser@localhost. I can not login. When I comment out the line above, it 
works again. So it would seem that *@localhost is not recognized. Is 
there more to add in sshd_config.


> When a user logs in, it logs in as user nx, then the nxuser logs in as
> the real user using ssh <user@localhost>

Which will fit our wishes perfectly if the ssh-rule above kicked in...

--
Trond Maehlum