Can an Account be Locked out for ssh but allow su?

[Henrik Hudson]

On Wednesday 08 October 2008, Martin McCormick <martin at dc.cis.okstate.edu> 
sent a missive stating: 
> 	Is there a way to configure an account such that one can
> su - this-account from another login on the system, but not ssh
> directly in to it from the outside, similar to the way root
> works if you set the terminal type in /etc/ttys to insecure?

Check the sshd_config man page for AllowUsers and DenyUsers directives. THis 
should do what you want.

Henrik
-- 
Henrik Hudson
lists at rhavenn.net
------------------------------
"God, root, what is difference?" Pitr; UF (http://www.userfriendly.org/)