Access Control Settings
The table below provides an overview of server settings you can use to control client access to the server.
By default, all client users with an account on the server host can connect to the server, open a terminal session, and access all local files and directories allowed for their user account from any client computer. You can edit the server configuration file (/etc/ssh2/sshd2_config) to customize access for client users, groups, and computers.
To |
Use |
|---|---|
Set the maximum number of connections |
MaxConnections |
Allow access to specified session types only |
SessionRestricted |
Control access from client users |
AllowUsers |
Control access from client groups |
AllowGroups |
Control access from client hosts |
AllowHosts |
Control access using TCP Wrappers |
LibWrap |
Restrict sftp and scp users or groups to a confined directory tree |
ChrootSftpUsers |
Control upload and download access rights for sftp and scp users. |
AllowSftpCommands |
Restrict port forwarding |
AllowTcpForwardingForGroups |
Configure PAM authentication |
AccountManagement |
 |