Posted on 04-26-2016 12:47 PM
I have a couple machines that I need to enable ssh/scp on, but it's a walkup machine, what's the best way to enable that for all users. I don't want to touch any of my custom ARD/Kickstart settings I've already set previously though.
I found this on superuser.com, but it didn't seem to work.
dscl . change /Groups/com.apple.access_ssh RecordName com.apple.access_ssh com.apple.access_ssh-disabled
Update: changed wording a bit.
Posted on 04-26-2016 01:00 PM
I believe removing the group reverts SSH access to everyone...just tried it on my machine and it seemed to work...do some testing though!
#disable SSH
launchctl unload -w /System/Library/LaunchDaemons/ssh.plist
#delete SSH group to reset to allow SSH for everyone
dseditgroup -o delete -t group com.apple.access_ssh
#enable SSH
launchctl load -w /System/Library/LaunchDaemons/ssh.plist