1)在/etc/pam.d/sshd增加(必须第一行):auth required pam_listfile.so item=user sense=deny file=/etc/sshdusers onerr=succeed 2)修改/etc/sshdusers 3)重新启动sshd