restricting ssh login based on IP

Verde Denim tdldev at gmail.com
Sat Feb 26 15:38:59 UTC 2011


On Sat, Feb 26, 2011 at 9:35 AM, Steve Lamb <grey at dmiyu.org> wrote:

> On 02/26/2011 06:23 AM, Robert Spanjaard wrote:
>
>> On Sat, 26 Feb 2011 06:45:23 +0000, Harry Strongburg wrote:
>>
>
>  On Sat, Feb 26, 2011 at 11:08:37AM +0530, Tapas Mishra wrote:
>>>
>>>> I would like to allow a user to login through SSH but with different
>>>> permission coming from different ipaddress.
>>>>
>>>
>  Sorry to sound unhelpful, but can't you just make a seperate
>>> user-account for each IP address, and then set the proper
>>> file-permissions to do what you desire?
>>>
>>
>  I can see the need for what the OP is trying to do. For my work, I can
>> log in to a certain website, but my permissions are (and need to be)
>> different for on-site and off-site IP's. Sadly, I don't know enough about
>> the issue to provide a solution.
>>
>
>    Not possible with SSH.  SSH is about providing access, nothing more.
>
> I would tend to agree with Steve on the purpose of SSH. Logging into a
system based on IP can be done with segemented LANs, but that's an on/off
proposition. For what you want, a custom post script at login would be a
possibility. I'm not sure that you could set file perms based solely on an
IP, though.

Jack

>
> --
>         Steve C. Lamb         | But who decides what they dream?
>       PGP Key: 8B6E99C5       |   And dream I do...
>
> -------------------------------+---------------------------------------------
>
>
> --
> ubuntu-users mailing list
> ubuntu-users at lists.ubuntu.com
> Modify settings or unsubscribe at:
> https://lists.ubuntu.com/mailman/listinfo/ubuntu-users
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.ubuntu.com/archives/ubuntu-users/attachments/20110226/353c95be/attachment.html>


More information about the ubuntu-users mailing list