Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

When I run

sudo dscl . -append /Groups/com.apple.access_ssh GroupMembership $USERNAME

I get

append: Invalid Path
<dscl_cmd> DS Error: -14009 (eDSUnknownNodeName)
share|improve this question

2 Answers 2

up vote 1 down vote accepted

I just looked at my copy of Mountain Lion and the com.apple.access_ssh group doesn't exist until you've actually turned on "Remote Login" in System Preferences.

When you turn on Remote Desktop AND set it to "Allow access for: Only these users", then there is a group called "com.apple.access_ssh". When you set it back to ""Allow access for: All users", the name of the group is changed to "com.apple.access_ssh-disabled".

share|improve this answer

Here’s how you can add groups to your SSH access list (aka a SACL). All commands must be run with root privileges:

Command to create the SACL (if it doesn’t already exist):

dseditgroup -o create -q com.apple.access_ssh

Add your group as a nested group inside the SACL group:

dseditgroup -o edit -a group_name_here -t group com.apple.access_ssh

If you’re adding an AD group, you may need to add the AD domain’s name:

dseditgroup -o edit -a DOMAIN\group_name_here -t group com.apple.access_ssh
share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.