0

Allow scp from only a particular group of systems for a particular group. I think an example will be more effective to understand my requirement.

Users : user1, user2, user3 utpto user20 ( All this user have separate credentials for access TargetPC )

ClientPCs : PC1,PC2,PC3,PC4 upto PC20 ( all have common credentials to login)

TargetPC : TGTPC ( OS:Ubuntu )

IP Address of all the systems are static ( users don't have rights to modify this )

My requirement is user1 to user10 should able to do scp to TGTPC using their credentials from PC1 to PC10 ONLY ( if they try to do scp from any other system it should fail)

same way user11 to user20 should able to do scp to TGTPC using their credentials from PC11 to PC20 ONLY ( if they try to do scp from any other system it should fail)

Improve this question
4
  • Should these restrictions just apply to scp? Or to ssh connections in general? In other words, should these users be allowed to make ssh connections without scp from PC1 and PC11? How about from hosts besides those two?
    – Kenster
    Jun 14, 2022 at 14:23
  • @Kenster These restrictions only for scp. Users are allowed to do ssh to anywhere.
    – Arun
    Jun 15, 2022 at 0:12
  • 1
    Then restricting their ability to run scp will be pretty pointless. For someone familiar with unix command-line tools, there are plenty of ways to transfer files through an ssh connection without using scp.
    – Kenster
    Jun 15, 2022 at 1:57
  • @Kenster I already removed binaries & from the default path which may be use for file transferring ( and using restricted bash to allow for selected users ). if required we can block ssh too , in our design there is no necessity for login to other systems.
    – Arun
    Jun 15, 2022 at 4:54

0

Reset to default

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.