[TriLUG] how do I limit log on off Id to thre IP address

[Greg Cox]

> I am running an linux server, and I want to limit a logon  id to
> three ip address. is there any way to do this with sshd?

pam's pam_access module will do it.

assuming a RH system...

Create /etc/security/sshd_access.conf
------
-:dude:ALL EXCEPT 192.168.12.2 192.168.12.6 192.168.12.9
+:ALL:ALL
------

Then add it to /etc/pam.d/sshd:
account    required     pam_access.so accessfile=/etc/security/sshd_access.conf