You need to specify the cmd-arg multiple times, one for each space
separated argument:
authorizedgroup deny service=shell cmd=changeto
cmd-arg=context cmd-arg=system
authorizedgroup permit service=shell cmd=changeto
cmd-arg=context cmd-arg=
authorizedgroup deny .*
BR Alex
On 2015-01-05 15:2
Dear Sender,
Thank you for your e-mail. Kindly be informed that I am on a short vacation
from 8th January 2015 and will resume office on Feb 15th 2015. During this
period, I'll have no access to e-mails and limited phone access.
For matters requiring immediate attention, you are kindly request
Thanks Heikki!
That was silly of me to omit such a basic configuration.
After I fixed it, I faced another problem (this time it is a Win 8 client). I
noticed that the client was sending the wrong certificate (another certificate
from the personal store) and authentication was failing due to tha
