[l008com]

I'm looking for a way to, in 10.2 Server, prevent a bunch of users to be able to log in using ssh. They are all mail users, and I wouldn't want someone to be able to gain my mail password and gain access to my computer with it. I know i 10.1 Server the admin app had an option to prevent logging in of users, but I don't see a similar option in the Workgroup Manager app. Where is it?

[Cipher13]

This shouldn't really be a concern... gathering passwords...

Either way, why not set their shell to /dev/null or something equally fallacious?

What kind of mail server system are you running? The standard one? Depending on the password scheme you use, you could even set the users password to "*" to deny login...

[gatorparrots]

man sshd_config

Code:
AllowGroups
             This keyword can be followed by a list of group name patterns,
             separated by spaces.  If specified, login is allowed only for
             users whose primary group or supplementary group list matches one
             of the patterns.  `*' and `'?  can be used as wildcards in the
             patterns.  Only group names are valid; a numerical group ID is
             not recognized.  By default, login is allowed for all groups.
...

AllowUsers
             This keyword can be followed by a list of user name patterns,
             separated by spaces.  If specified, login is allowed only for
             users names that match one of the patterns.  `*' and `'?  can be
             used as wildcards in the patterns.  Only user names are valid; a
             numerical user ID is not recognized.  By default, login is
             allowed for all users.  If the pattern takes the form USER@HOST
             then USER and HOST are separately checked, restricting logins to
             particular users from particular hosts.

For my configuration, I have:
AllowGroups admin
in /etc/sshd_config.

[Xeo]

In Workgroup Manager you can set the login shell to whatever you want. "/sbin/nologin" is a good one because it gives them a message before logging them out.

I can't remember off hand but I thought there was a check box for keeping users from logging in. I'll have to check when I have access to my server again.