Using PAM for additional SSH/Console authentication

[Stuart Sears]

Stuart Sears wrote:

> Yagi Angrypants wrote:

<snip>

> I believe pam_listfile will do this for you:
> /usr/share/doc/Linux-Pam-*/
>
> possibly in /etc/pam.d/login:
> (not in system-auth, unless you are  never going to run authconfig again)
>
> auth   required   pam_listfile.so sense=allow item=user onerr=deny 
> file=/etc/allowedusers


bad form , I know, replying to myslef, but it occurs to me that this 
would be better in /etc/pam.d/sshd