The module pam_access may be used to control which users can login from which place (terminal, remote login, domain, etc).