Ezsh shell disallowed
Troubleshooting "ezsh shell disallowed" error for SSH gateway users
Overview: This article describes SSH gateway users encountering the 'Ezsh shell disallowed' error while accessing the backend via SSH, highlighting the need for explicit configuration in Access Control to grant access to the ezsh shell, requiring super admin or privileged user rights.
ssh john@gateway-server
john@gateway-server's password:
Ezsh shell disallowed
Method 1: Grant privilege for user group:
Provide the SSH user group with access to the ezsh shell by granting the required privilege: Access Control -> UserGroup Action -> Gateway -> Enable Ezsh Shell
Method 2: Grant privilege for a single user:
Provide the SSH user with access to the ezsh shell by granting the required privilege: Access Control -> User Action -> Gateway -> Enable Ezsh Shell
Emergency CLI Method:
If you want to allow ezsh shell for all users run the following command on the jump server
:~# php /usr/local/ezlogin/ez_queryrunner.php "replace into prefix_usergroup_func_acls (usergroup_id, func_id) select id, 253 from prefix_usergroups"
Related Articles