Re: [OT] resctrict ssh to localnet for some users but not for others.

[Wichert Akkerman <wichert@wiggy.net>]

Previously martin f krafft wrote:
> nope, this isn't possible with the current sshd. an interesting
> feature though...

>From the sshd manpage:

     AllowUsers
             This keyword can be followed by a list of user names, separated
             by spaces.  If specified, login is allowed only for users names
             that match one of the patterns.  `*' and `'?  can be used as
             wildcards in the patterns.  Only user names are valid; a numeri­
             cal user ID is not recognized.  By default login is allowed
             regardless of the user name.  If the pattern takes the form
             USER@HOST then USER and HOST are separately checked, restricting
             logins to particular users from particular hosts.

The @HOST bit may be new in OpenSSH 3 though.

Wichert.

-- 
  _________________________________________________________________
 /wichert@wiggy.net         This space intentionally left occupied \
| wichert@deephackmode.org            http://www.liacs.nl/~wichert/ |
| 1024D/2FA3BC2D 576E 100B 518D 2F16 36B0  2805 3CB8 9250 2FA3 BC2D |