Tectia

Restricting User Logins

By default, Tectia Server does not impose any login restrictions in addition to those provided by the operating system. However, you can restrict connections based on host, username, or group.

The restrictions are defined in the sshd2_config file using the following syntax:

keyword             pattern
[Note]Note

All the patterns used in the examples below are in accordance with the egrep syntax, which is the default regex syntax in Tectia Server for IBM z/OS.

Examples of commonly used regular expressions and conventions with egrep syntax:

The regex syntax can be chosen by using the metaconfig block in the beginning of sshd2_config and ssh_certd_config files:

## SSH CONFIGURATION FILE FORMAT VERSION 1.1
## REGEX-SYNTAX egrep
## end of metaconfig

Possible values of REGEX-SYNTAX are ssh, egrep, zsh_fileglob and traditional. For more information, please see the sshregex man page (sshregex).

Previous versions of SSH Secure Shell (3.1 and earlier) always use the zsh_fileglob syntax.

Available keywords are the following:

For more information on keywords, see the sshd2_config man page (sshd2_config).