Home / ubuntu / Questions / 853252
Accepted
Sergiy Kolodyazhnyy
Asked: 2016-11-25 11:24:07 +0800 CST

How to block specific username from ssh?

  • 772

I have testuser and I want that user to be able log-in locally, but not via ssh. How can I implement that?

security

2 Answers

  1. Best Answer

    Put DenyUsers user1 user2 user3 in /etc/ssh/sshd_config

    • 39

  2. Artyom answer is correct. I'd just like to point that there is also the possibility to opt for a 'white-list' approach instead of the 'black-list' one by putting a line like this in /etc/ssh/sshd_config:

    AllowUsers AuthorizedUser1 AuthorizedUser2

    and reloading ssh service (service ssh restart)

    Then every other user will be denied ssh access (be careful not to lock yourself out ;-) )

    • 16