X-Spam-Check-By:	sourceware.org
From:	"Wes S" <wess AT acegroup DOT cc>
To:	cygwin AT cygwin DOT com
Date:	Sat, 31 Dec 2005 17:28:41 -0500
MIME-Version:	1.0
Subject:	sshd_conf and local groups
Message-ID:	<43B6BFC9.4630.2942A6@localhost>
X-BCN:	Meridius 1000 Version 3.2 on smtp.acecomgroup.com
X-BCN-Sender:	wess AT acegroup DOT cc
X-IsSubscribed:	yes
Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sourceware.org/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com

I'm trying to lock down ssh access.  I use exim for a mail server so 
I have a bunch of accounts on my w2k box.  I don't want most to be 
able to use ssh.

So reading the man file for sshd_config I added to the following 
entry to sshd_config:

#wrs 20051231 restrict email only nt accounts from ssh
AllowGroups ssh_allow

I added a local group using administration / computer management

I imported into my /etc/group file:
ssh_allow:S-1-5-21-1801674531-688789844-1060284298-1007:1007:

Windows shows it as:
C:\Documents and Settings\Administrator>net localgroup

Aliases for \\BAREFOOT

-------------------------------------------------------------------------------
*Administrators           *Backup Operators         *Guests
*Power Users              *Replicator               *ssh_allow
*Test                     *Users
The command completed successfully.


Attempting to ssh into my pc:
Administrator AT barefoot ~
$ ssh -l administrator 127.0.0.1
administrator AT 127 DOT 0 DOT 0 DOT 1's password:
Permission denied, please try again.
administrator AT 127 DOT 0 DOT 0 DOT 1's password:

Commenting out AllowGroups ssh_allow and restarting sshd lets me log 
in just fine.

A clue would be welcome.  The install was updated after I ran into 
these problems at 14:30 Eastern today.

Thanks in advance,

Wes S


--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

- Raw text -