docs/99215: Documentation change for sshd_config

[Douglas Denault]

>Number:         99215
>Category:       docs
>Synopsis:       Documentation change for sshd_config
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    freebsd-doc
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          doc-bug
>Submitter-Id:   current-users
>Arrival-Date:   Tue Jun 20 20:10:19 GMT 2006
>Closed-Date:
>Last-Modified:
>Originator:     Douglas Denault
>Release:        6.1
>Organization:
Safeport Network Services
>Environment:
FreeBSD artemis.boltsys.com 6.1-STABLE FreeBSD 6.1-STABLE #6: Tue Jun  6 03:36:37 EDT 2006     doug at artemis.boltsys.com:/usr/obj/usr/src/sys/ARTEMIS  i386

>Description:
OpenSSH implements a specific order in processing the directives. The following should be added to shd_config:

The allow/deny directives are processed in the following order: DenyUsers, AllowUsers, DenyGroups, and finally AllowGroups.
>How-To-Repeat:
man sshd_config
>Fix:
The following should be added to shd_config:

The allow/deny directives are processed in the following order: DenyUsers, AllowUsers, DenyGroups, and finally AllowGroups.
>Release-Note:
>Audit-Trail:
>Unformatted: