{"id":5842,"date":"2017-07-03T07:08:21","date_gmt":"2017-07-03T07:08:21","guid":{"rendered":"https:\/\/cpanelplesk.com\/wp62\/?p=5842"},"modified":"2021-02-01T05:55:00","modified_gmt":"2021-02-01T05:55:00","slug":"denyallow-access-users-groups-openssh","status":"publish","type":"post","link":"https:\/\/cpanelplesk.com\/wp62\/denyallow-access-users-groups-openssh\/","title":{"rendered":"How to Deny\/Allow Access for Users &#038; Groups in OpenSSH"},"content":{"rendered":"<p><span style=\"color: #000000;\">For security reasons many times we need to restrict or allow SSH access for specific Users or Groups. OpenSSH has two directives for allowing and denying ssh user access.<!--more--><\/span><\/p>\n<p><span style=\"color: #000000;\">To make any changes edit OpenSSH configuration file \/etc\/ssh\/sshd_config and do required changes for allowing or denying any user or group in to your Linux or Unix based servers.<\/span><\/p>\n<h3><span style=\"color: #000000;\">Allow\/Deny Users and Groups:<\/span><\/h3>\n<p><span style=\"color: #000000;\">To allow or deny any user or group on<a href=\"https:\/\/cpanelplesk.com\/wp62\/start-stop-restart-enable-reload-openssh-server-linux\/\"> OpenSSH<\/a>, You need to edit configuration file \/etc\/ssh\/sshd_config in your favorite editor and do changes as given below.<\/span><\/p>\n<p><span style=\"color: #000000;\"><strong>1. Deny Users:<\/strong> To restrict or block specific user for <a href=\"https:\/\/cpanelplesk.com\/wp62\/ssh-key-generation-passwordless-ssh-login-linux\/\">SSH<\/a> on server add the following rules.<\/span><\/p>\n<p><span style=\"color: #000000;\">For example i want to restrict users Norman, John and Sarah.<\/span><\/p>\n<div class=\"space1\"><\/div>\n<div class=\"command-sh\">\n<pre>DenyUsers Norman John Sarah<\/pre>\n<\/div>\n<div class=\"space1\"><\/div>\n<p><span style=\"color: #000000;\"><strong>2. Deny Groups:<\/strong> We can also restrict groups in OpenSSH. For example to restrict support and NOC groups from ssh add following rules.<\/span><\/p>\n<div class=\"space1\"><\/div>\n<div class=\"command-sh\">\n<pre>DenyGroups support NOC<\/pre>\n<\/div>\n<div class=\"space1\"><\/div>\n<p><span style=\"color: #000000;\"><strong>3. Allow Users:<\/strong> By default all users are allowed to login <a href=\"https:\/\/cpanelplesk.com\/wp62\/how-to-install-or-update-openssh-server-on-ubuntu\/\">OpenSSH server<\/a>. But we can specifically allow any user, For example shawn and max belongs to support group and we already have restricted that group members. So we can specify that users in Allow users.<\/span><\/p>\n<div class=\"space1\"><\/div>\n<div class=\"command-sh\">\n<pre>AllowUsers shawn max<\/pre>\n<\/div>\n<div class=\"space1\"><\/div>\n<p><span style=\"color: #000000;\"><strong>4. Allow Groups:<\/strong> Similarly we can allow all the members of specific group which may be denied by any other group. For example user austin and james belongs to NOC group as well as admin group. So we can allow access to both users by allowing admin group.<\/span><\/p>\n<div class=\"space1\"><\/div>\n<div class=\"command-sh\">\n<pre>AllowGroups admin<\/pre>\n<\/div>\n<div class=\"space1\"><\/div>\n<h3><span style=\"color: #000000;\">Restart OpenSSH:<\/span><\/h3>\n<p><span style=\"color: #000000;\">Once completed all changes, make sure to restart OpenSSH service as following.<\/span><\/p>\n<div class=\"space1\"><\/div>\n<div class=\"command-sh\">\n<pre># service sshd restart\r\nor\r\n# systemd restart sshd<\/pre>\n<\/div>\n<div class=\"space1\"><\/div>\n","protected":false},"excerpt":{"rendered":"<p>For security reasons many times we need to restrict or allow SSH access for specific Users or Groups. OpenSSH has two directives for allowing and denying ssh user access. [&#8230;]<\/p>\n<p><a class=\"understrap-read-more-link\" href=\"https:\/\/cpanelplesk.com\/wp62\/denyallow-access-users-groups-openssh\/\">Continue Reading&#8230;<\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1,14],"tags":[],"class_list":["post-5842","post","type-post","status-publish","format-standard","hentry","category-cpanel","category-linux"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v24.1 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>How to Deny\/Allow Access for Users &amp; Groups in OpenSSH - cPanel Plesk<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/cpanelplesk.com\/wp62\/denyallow-access-users-groups-openssh\/\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:title\" content=\"How to Deny\/Allow Access for Users &amp; Groups in OpenSSH - cPanel Plesk\" \/>\n<meta name=\"twitter:description\" content=\"For security reasons many times we need to restrict or allow SSH access for specific Users or Groups. OpenSSH has two directives for allowing and denying ssh user access. [...]Continue Reading...\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Seemab Saleem\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"1 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/cpanelplesk.com\/wp62\/denyallow-access-users-groups-openssh\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/cpanelplesk.com\/wp62\/denyallow-access-users-groups-openssh\/\"},\"author\":{\"name\":\"Seemab Saleem\",\"@id\":\"https:\/\/cpanelplesk.com\/wp62\/#\/schema\/person\/73d573cc7eaaf6625cf0dbd72191a648\"},\"headline\":\"How to Deny\/Allow Access for Users &#038; Groups in OpenSSH\",\"datePublished\":\"2017-07-03T07:08:21+00:00\",\"dateModified\":\"2021-02-01T05:55:00+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/cpanelplesk.com\/wp62\/denyallow-access-users-groups-openssh\/\"},\"wordCount\":261,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/cpanelplesk.com\/wp62\/#\/schema\/person\/c78ae1cf9451a09592fb9697d69c0c13\"},\"articleSection\":[\"Cpanel\",\"Linux\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/cpanelplesk.com\/wp62\/denyallow-access-users-groups-openssh\/\",\"url\":\"https:\/\/cpanelplesk.com\/wp62\/denyallow-access-users-groups-openssh\/\",\"name\":\"How to Deny\/Allow Access for Users & Groups in OpenSSH - cPanel Plesk\",\"isPartOf\":{\"@id\":\"https:\/\/cpanelplesk.com\/wp62\/#website\"},\"datePublished\":\"2017-07-03T07:08:21+00:00\",\"dateModified\":\"2021-02-01T05:55:00+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/cpanelplesk.com\/wp62\/denyallow-access-users-groups-openssh\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/cpanelplesk.com\/wp62\/denyallow-access-users-groups-openssh\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/cpanelplesk.com\/wp62\/denyallow-access-users-groups-openssh\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/cpanelplesk.com\/wp62\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"How to Deny\/Allow Access for Users &#038; Groups in OpenSSH\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/cpanelplesk.com\/wp62\/#website\",\"url\":\"https:\/\/cpanelplesk.com\/wp62\/\",\"name\":\"cPanel Plesk\",\"description\":\"Blog on famous hosting control panels\",\"publisher\":{\"@id\":\"https:\/\/cpanelplesk.com\/wp62\/#\/schema\/person\/c78ae1cf9451a09592fb9697d69c0c13\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/cpanelplesk.com\/wp62\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\/\/cpanelplesk.com\/wp62\/#\/schema\/person\/c78ae1cf9451a09592fb9697d69c0c13\",\"name\":\"Farooq Omer\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/cpanelplesk.com\/wp62\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/cpanelplesk.com\/wp62\/wp-content\/uploads\/2020\/11\/cpanelplesk.png\",\"contentUrl\":\"https:\/\/cpanelplesk.com\/wp62\/wp-content\/uploads\/2020\/11\/cpanelplesk.png\",\"width\":300,\"height\":44,\"caption\":\"Farooq Omer\"},\"logo\":{\"@id\":\"https:\/\/cpanelplesk.com\/wp62\/#\/schema\/person\/image\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\/\/cpanelplesk.com\/wp62\/#\/schema\/person\/73d573cc7eaaf6625cf0dbd72191a648\",\"name\":\"Seemab Saleem\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/cpanelplesk.com\/wp62\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/6a87ff2e53b03e6839250e5278a6bd46?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/6a87ff2e53b03e6839250e5278a6bd46?s=96&d=mm&r=g\",\"caption\":\"Seemab Saleem\"},\"description\":\"Linux Server Administrator, Web Hosting engineer. I'm dealing with Linux servers since 2014. I started this blog to share the work i love with the world . let me know if you need any assistance. Thanks!!\",\"sameAs\":[\"https:\/\/cpanelplesk.com\/wp62\"],\"url\":\"https:\/\/cpanelplesk.com\/wp62\/author\/cmb\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"How to Deny\/Allow Access for Users & Groups in OpenSSH - cPanel Plesk","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/cpanelplesk.com\/wp62\/denyallow-access-users-groups-openssh\/","twitter_card":"summary_large_image","twitter_title":"How to Deny\/Allow Access for Users & Groups in OpenSSH - cPanel Plesk","twitter_description":"For security reasons many times we need to restrict or allow SSH access for specific Users or Groups. OpenSSH has two directives for allowing and denying ssh user access. [...]Continue Reading...","twitter_misc":{"Written by":"Seemab Saleem","Est. reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/cpanelplesk.com\/wp62\/denyallow-access-users-groups-openssh\/#article","isPartOf":{"@id":"https:\/\/cpanelplesk.com\/wp62\/denyallow-access-users-groups-openssh\/"},"author":{"name":"Seemab Saleem","@id":"https:\/\/cpanelplesk.com\/wp62\/#\/schema\/person\/73d573cc7eaaf6625cf0dbd72191a648"},"headline":"How to Deny\/Allow Access for Users &#038; Groups in OpenSSH","datePublished":"2017-07-03T07:08:21+00:00","dateModified":"2021-02-01T05:55:00+00:00","mainEntityOfPage":{"@id":"https:\/\/cpanelplesk.com\/wp62\/denyallow-access-users-groups-openssh\/"},"wordCount":261,"commentCount":0,"publisher":{"@id":"https:\/\/cpanelplesk.com\/wp62\/#\/schema\/person\/c78ae1cf9451a09592fb9697d69c0c13"},"articleSection":["Cpanel","Linux"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/cpanelplesk.com\/wp62\/denyallow-access-users-groups-openssh\/","url":"https:\/\/cpanelplesk.com\/wp62\/denyallow-access-users-groups-openssh\/","name":"How to Deny\/Allow Access for Users & Groups in OpenSSH - cPanel Plesk","isPartOf":{"@id":"https:\/\/cpanelplesk.com\/wp62\/#website"},"datePublished":"2017-07-03T07:08:21+00:00","dateModified":"2021-02-01T05:55:00+00:00","breadcrumb":{"@id":"https:\/\/cpanelplesk.com\/wp62\/denyallow-access-users-groups-openssh\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/cpanelplesk.com\/wp62\/denyallow-access-users-groups-openssh\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/cpanelplesk.com\/wp62\/denyallow-access-users-groups-openssh\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/cpanelplesk.com\/wp62\/"},{"@type":"ListItem","position":2,"name":"How to Deny\/Allow Access for Users &#038; Groups in OpenSSH"}]},{"@type":"WebSite","@id":"https:\/\/cpanelplesk.com\/wp62\/#website","url":"https:\/\/cpanelplesk.com\/wp62\/","name":"cPanel Plesk","description":"Blog on famous hosting control panels","publisher":{"@id":"https:\/\/cpanelplesk.com\/wp62\/#\/schema\/person\/c78ae1cf9451a09592fb9697d69c0c13"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/cpanelplesk.com\/wp62\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":["Person","Organization"],"@id":"https:\/\/cpanelplesk.com\/wp62\/#\/schema\/person\/c78ae1cf9451a09592fb9697d69c0c13","name":"Farooq Omer","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cpanelplesk.com\/wp62\/#\/schema\/person\/image\/","url":"https:\/\/cpanelplesk.com\/wp62\/wp-content\/uploads\/2020\/11\/cpanelplesk.png","contentUrl":"https:\/\/cpanelplesk.com\/wp62\/wp-content\/uploads\/2020\/11\/cpanelplesk.png","width":300,"height":44,"caption":"Farooq Omer"},"logo":{"@id":"https:\/\/cpanelplesk.com\/wp62\/#\/schema\/person\/image\/"}},{"@type":"Person","@id":"https:\/\/cpanelplesk.com\/wp62\/#\/schema\/person\/73d573cc7eaaf6625cf0dbd72191a648","name":"Seemab Saleem","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cpanelplesk.com\/wp62\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/6a87ff2e53b03e6839250e5278a6bd46?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/6a87ff2e53b03e6839250e5278a6bd46?s=96&d=mm&r=g","caption":"Seemab Saleem"},"description":"Linux Server Administrator, Web Hosting engineer. I'm dealing with Linux servers since 2014. I started this blog to share the work i love with the world . let me know if you need any assistance. Thanks!!","sameAs":["https:\/\/cpanelplesk.com\/wp62"],"url":"https:\/\/cpanelplesk.com\/wp62\/author\/cmb\/"}]}},"_links":{"self":[{"href":"https:\/\/cpanelplesk.com\/wp62\/wp-json\/wp\/v2\/posts\/5842","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cpanelplesk.com\/wp62\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cpanelplesk.com\/wp62\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cpanelplesk.com\/wp62\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/cpanelplesk.com\/wp62\/wp-json\/wp\/v2\/comments?post=5842"}],"version-history":[{"count":0,"href":"https:\/\/cpanelplesk.com\/wp62\/wp-json\/wp\/v2\/posts\/5842\/revisions"}],"wp:attachment":[{"href":"https:\/\/cpanelplesk.com\/wp62\/wp-json\/wp\/v2\/media?parent=5842"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cpanelplesk.com\/wp62\/wp-json\/wp\/v2\/categories?post=5842"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cpanelplesk.com\/wp62\/wp-json\/wp\/v2\/tags?post=5842"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}