Pam config to enable only 1 remote ID

Edit /etc/pam.d/ssh and add

account required pam_access.so

Then add

+ : ALL : 192.168.
+ : obamab : ALL
- : ALL : ALL

This will allow ALL id's on 192.168.x.x
and only obamab id from ALL hosts
and then deny anything else