Enabling SSH Login for non-Root Users

From TufinOS 4.30, any user, who is a member of the ssh_users group, can using SSH to log into the server on which TufinOS is deployed. Use this procedure to enable SSH login for a user.

  1. Log in as the tufin-admin user and run the following command as the root user:

    [<ADMIN> ~]$ sudo su -
    [<ADMIN> ~]$ sudo su -
    [<ADMIN> ~]# usermod -aG ssh_users <USER>
    [<ADMIN> ~]# usermod -aG ssh_users <USER>

    where <USER> is the user that should be granted the SSH login permission.

  2. Ensure that the user is a member of the ssh_users group:

    [<ADMIN> ~]# id <USER>
    [<ADMIN> ~]# id <USER>

    You should see the ssh_users group in the command output. For example:

    uid=1001(User1) gid=1001(User1) groups=1001(User1),989(ssh_users)