From ee5e75dcbc3143b752ecaabd07d874fc544841a6 Mon Sep 17 00:00:00 2001 From: buchel_k Date: Thu, 2 Apr 2026 11:05:40 +0200 Subject: [PATCH] fix LOCAL limitation --- docs/admin-guide/configuration/access/system_access.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/docs/admin-guide/configuration/access/system_access.md b/docs/admin-guide/configuration/access/system_access.md index 68da08f8..9b17fbc1 100644 --- a/docs/admin-guide/configuration/access/system_access.md +++ b/docs/admin-guide/configuration/access/system_access.md @@ -10,10 +10,10 @@ aaa::users: ``` Groups are allowed with the `%` prefix in front of the group name. -To limit a login to the physical desktop/console only you can add a `:LOCAL` suffix like this: +To limit a login to the physical desktop/console only you can add an full [access.conf](https://man7.org/linux/man-pages/man5/access.conf.5.html) line with a `LOCAL` restriction like this: ``` aaa::users: - - 'muster_h:LOCAL' + - '+:muster_h:LOCAL' ``` Note that administrative users (see below) always have normal access without being explicitely listed in `aaa::users`.