vim /etc/pam.d/sshd
account required pam_access.so
vim /etc/security/access.conf
+ : root : ALL + : bigdata_admin : ALL + : zhangsan3 : ALL + : lisi : ALL + : asset_group : ALL + : etl_user : ALL #+ : etl_user : 10.214.128.126 10.214.128.127 10.214.128.128 - : ALL : ALL
vim /etc/ssh/ssh_config
Host *
GSSAPIAuthentication yes
# If this option is set to yes then remote X11 clients will have full access
# to the original X11 display. As virtually no X11 client supports the untrusted
# mode correctly we set this to yes.
ForwardX11Trusted yes
# Send locale-related environment variables
SendEnv LANG LC_CTYPE LC_NUMERIC LC_TIME LC_COLLATE LC_MONETARY LC_MESSAGES
SendEnv LC_PAPER LC_NAME LC_ADDRESS LC_TELEPHONE LC_MEASUREMENT
SendEnv LC_IDENTIFICATION LC_ALL LANGUAGE
SendEnv XMODIFIERS
