Logic operators in AllowGroups in sshd_config

Question

Is it possible to use logical operators in AllowGroups in sshd_config? The thing I want to achieve is to permit user to access server only when it belongs to two groups. ChatGPT gave me this answer, but I'm not convinced to it... I didn't find any other useful information, even in documentation.

Many thanks for answer.

Answer 1

The answer by ChatGPT is pure nonsense - this tool is meant to produce works that emulate human texts, but you should not treat it on the same level as Google.

sshd_config allows patterns in the AllowGroups directive, which are defined as:

A pattern consists of zero or more non-whitespace characters, *' (a wildcard that matches zero or more characters), or ?' (a wildcard that matches exactly one character).

A pattern-list is a comma-separated list of patterns. Patterns within pattern-lists may be negated by preceding them with an exclamation mark (`!').

Specifically, the | and & operators are not included.

For your problem, you might be able to achieve the restriction to the two groups by using the negation operator, such as:

DenyGroups !group1,!group2

So anyone who is either not in group1 or not in group2 is denied login.