> Hmm.. I'm seeing something weird with the pam-0.75-19 RedHat rpm.  I'm
> restricting ssh access to a box using the following for my
> /etc/security/access.conf
>
> -:ALL:ALL EXCEPT LOCAL 10.10.0.1
>
> When I try to ssh in from that IP, I get the following in the logs.
>
> Feb 19 10:04:11 test1 sshd[1774]: PAM rejected by account
> configuration[6]: Permission denied
> Feb 19 10:04:11 test1 sshd[1774]: Failed password for ROOT from
> 10.10.0.1 port 34741 ssh2
>
> However, if I change my access.conf to look like this..
>
> -ALL:ALL EXCEPT LOCAL 10.10.0.
>
> I can log in fine.  It's almost like there is a weird bug or something
> that is failing to match a single complete IP in access.conf?

Don't you have to have a period at the end of the IP address (as it says in
the comments in access.conf) ?



-----------------------------------------
This email was sent using SquirrelMail.
   "Webmail for nuts!"
http://squirrelmail.org/


Reply via email to