From owner-freebsd-questions Fri Feb 21 5: 9:32 2003 Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 9FB6437B401 for ; Fri, 21 Feb 2003 05:09:31 -0800 (PST) Received: from osm.michaelines.net (osm.michaelines.net [66.238.77.213]) by mx1.FreeBSD.org (Postfix) with ESMTP id 1728D43F85 for ; Fri, 21 Feb 2003 05:09:31 -0800 (PST) (envelope-from jtrigg@spamcop.net) Received: by osm.michaelines.net (Postfix, from userid 1002) id 6ECA720D16; Fri, 21 Feb 2003 08:10:12 -0500 (EST) Date: Fri, 21 Feb 2003 08:10:12 -0500 From: Jim Trigg To: freebsd-questions@FreeBSD.ORG Subject: Re: ftp users - question Message-ID: <20030221131012.GA27265@michaelines.net> Mail-Followup-To: freebsd-questions@FreeBSD.ORG References: <005d01c2d92d$8d70c990$0701a8c0@darryl> <20030220231312.GA66761@grimoire.chen.org.nz> <20030221055951.GA96171@raggedclown.net> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20030221055951.GA96171@raggedclown.net> User-Agent: Mutt/1.4i Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG On Fri, Feb 21, 2003 at 06:59:51AM +0100, Cliff Sarginson wrote: > On Fri, Feb 21, 2003 at 12:13:12PM +1300, Jonathan Chen wrote: > > On Thu, Feb 20, 2003 at 04:15:18PM -0600, Darryl Hoar wrote: > > > Greetings, > > > I have a machine setup running 4.7 - stable. It is an internal machine. > > > How do I setup a user (so they can upload with ftp) but can't login at > > > the shell ? Is this possible ? > > > > Set up the users with a non-existent shell (eg: /nonexistent), and add > > the non-existent shell entry into /etc/shells. > > Conventionally such users woud be given a shell of "/sbin/nologin", which > must also be added into the list contained in "/etc/shells". > The program "/sbin/nologin" already exists, so no need to create it. As an added measure of security, I'd advise making a link of /sbin/nologin called /sbin/ftponly and adding that to /etc/shells instead of nologin. That way, system accounts that shouldn't be able to be logged in through ftp either can still have the shell /sbin/nologin. Users that should only be able to access the system through FTP get the shell /sbin/ftponly. It also make the passwd file more understandable. Jim Trigg -- Jim Trigg, Lord High Everything Else O- /"\ \ / ASCII RIBBON CAMPAIGN Hostmaster, Huie Kin family website X HELP CURE HTML MAIL Verger, All Saints Church - Sharon Chapel / \ To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message