pam_access

[Scott Ruckh]

This is what you said Bill Tangren
> Does anyone use pam_access.so and /etc/security/access.conf to restrict
> login
> access? If so, did you add
>
> account required pam_access.so
>
> to /etc/pam.d/login, or to /etc/pam.d/system-auth (or elsewhere)?
>
> What did you add (or uncomment) in access.conf, and to what purpose?
>
> TIA,
>
> Bill Tangren
>
We have added it to our /etc/pam.d/sshd file.

account    required     pam_access.so

In /etc/security/access.conf we configure it so that you must be a member
of a certain group in order to login.

-:ALL EXCEPT <groupname> :ALL