source: trunk/debathena/config/pam-config/debian/access.conf.append @ 22761

Revision 22761, 628 bytes checked in by andersk, 16 years ago (diff)
Explicitly allow root and (on Ubuntu) admin in addition to nss-local-users.
RevLine 
[22685]1
2#DEBATHENA BEGIN
[22761]3
[22685]4#DEBATHENA EXAMPLES
5## Only root and tabbott can log in.
6#-:ALL EXCEPT root tabbott:ALL
7## Only andersk and tabbott can log in remotely.
8#-:ALL EXCEPT andersk tabbott:ALL EXCEPT LOCAL
9## Only root and users in group gsipb can log in.
10#-:ALL EXCEPT root gsipb:ALL
[22761]11# Note that you can use Moira NFS groups here.
12# See <http://debathena.mit.edu/access-controls> for details.
[22685]13
[22761]14# DEFAULT: Only allow remote access for users who have local accounts
[22731]15# on the machine (i.e. are in /etc/passwd).  Allow all other users to
16# login only locally.
17
[22761]18-:ALL EXCEPT root admin nss-local-users:ALL EXCEPT LOCAL
19
[22685]20#DEBATHENA END
Note: See TracBrowser for help on using the repository browser.