Hehehe, it doesn't respect pam either. I think the problem is the use of ssh2 rather than OpenSSH that does seem to work with PAM. I have yet to decide whether to change to it, but in any case I'm not going to do it right away and I just needed those restrictions for today. I can't believe ssh2 doesn't support AllowGroups or similar. Thanks for the help (u too Jaume) :)) -S-