Welcome to the MacNN Forums.

moonchilddave · Oct 23, 2008, 09:08 AM

Running 10.4.11 Client on PPC.

I have a user account that I would like to restrict to SSH only access. Mainly, I don't want them to be able to sit at the console and login. Is this possible? I know that I could create a login item to kill the loginwindow - but that can be bypassed by holding down shift. Any better ways of accomplishing this?

besson3c · Oct 23, 2008, 09:29 AM

Why not just change his password to something only you know, and force him to establish SSH connections via his public key?

Simon · Oct 23, 2008, 10:35 AM

There used to be something in OS X with UIDs. If the UID was chosen properly it would restrict certain types of sessions. Forgot the details though.

moonchilddave · Oct 23, 2008, 11:31 AM

Originally Posted by besson3c

Why not just change his password to something only you know, and force him to establish SSH connections via his public key?

Unfortunantly that is not an option, for many reasons that I just can't get into.

I know UID's under 100 would not show up on the login screen - but that's not really an issue because my login screen is set so you have to enter a username/password.