enable ssh (only) for all users

ImAMacGuy
Valued Contributor II

I have a couple machines that I need to enable ssh/scp on, but it's a walkup machine, what's the best way to enable that for all users. I don't want to touch any of my custom ARD/Kickstart settings I've already set previously though.

I found this on superuser.com, but it didn't seem to work.

dscl . change /Groups/com.apple.access_ssh RecordName com.apple.access_ssh com.apple.access_ssh-disabled

Update: changed wording a bit.

1 REPLY 1

Josh_Smith
Valued Contributor

I believe removing the group reverts SSH access to everyone...just tried it on my machine and it seemed to work...do some testing though!

#disable SSH
launchctl unload -w /System/Library/LaunchDaemons/ssh.plist
#delete SSH group to reset to allow SSH for everyone
dseditgroup -o delete -t group com.apple.access_ssh
#enable SSH
launchctl load -w /System/Library/LaunchDaemons/ssh.plist