A while ago I had configured an RH box so that ssh
users had to have their account names entered into a
text file (in addition to the "usual" requirements) in
order to be able to ssh into a machine.
I can't remember how to do this now. I'd like to configure a box I have now so that ssh and console users need to have their accounts specificially entered into additional text files to permit such access. Can someone point me to a good link that discusses modifying the PAM configuration to accomplish this?
Thanks
I believe pam_listfile will do this for you: /usr/share/doc/Linux-Pam-*/
possibly in /etc/pam.d/login: (not in system-auth, unless you are never going to run authconfig again)
auth required pam_listfile.so sense=allow item=user onerr=deny file=/etc/allowedusers
__________________________________
Do you Yahoo!?
Win a $20,000 Career Makeover at Yahoo! HotJobs http://hotjobs.sweepstakes.yahoo.com/careermakeover
-- redhat-list mailing list unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subject=unsubscribe https://www.redhat.com/mailman/listinfo/redhat-list