From owner-freebsd-questions@FreeBSD.ORG Mon Apr 19 19:28:25 2004 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id D315816A4CE for ; Mon, 19 Apr 2004 19:28:25 -0700 (PDT) Received: from msr70.hinet.net (msr70.hinet.net [168.95.4.170]) by mx1.FreeBSD.org (Postfix) with ESMTP id C3FC743D53 for ; Mon, 19 Apr 2004 19:28:24 -0700 (PDT) (envelope-from y2kbug@ms25.hinet.net) Received: from sonic (61-227-219-180.dynamic.hinet.net [61.227.219.180]) by msr70.hinet.net (8.9.3/8.9.3) with SMTP id KAA29186 for ; Tue, 20 Apr 2004 10:28:23 +0800 (CST) Date: Tue, 20 Apr 2004 10:25:06 +0800 From: Robert Storey To: freebsd-questions@freebsd.org Message-Id: <20040420102506.120a0298.y2kbug@ms25.hinet.net> X-Mailer: Sylpheed version 0.8.11 (GTK+ 1.2.10; i386-debian-linux-gnu) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Subject: restricting ssh to authorized users X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list Reply-To: y2kbug@ms25.hinet.net List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 20 Apr 2004 02:28:26 -0000 I've been wondering what is the best way to prevent certain users from being able to login with ssh, even though I want to allow them ftp access? The opposite is easy to accomplish - if I put somebody's name in file /etc/ftpusers, that person cannot login with ftp, but they could still login with ssh. But I don't see a file /etc/sshusers, and I'm wondering if there is some equivalent. TIA, Robert