Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 25 Mar 2005 11:11:51 -0500
From:      "Grant Peel" <gpeel@thenetnow.com>
To:        "Eric McCoy" <emccoy@haystacks.org>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: sFTP nologin
Message-ID:  <004b01c53155$5ce59c60$6401a8c0@GRANT>
References:  <002c01c53145$b9c64390$6401a8c0@GRANT> <4244354E.10401@haystacks.org>

next in thread | previous in thread | raw e-mail | index | archive | help
Yes, been trying that all morning. sbin/nologin kills the connection after 
it prints the message.

i have been tring scponly it has been less that workable so far too.

-GRant




----- Original Message ----- 
From: "Eric McCoy" <emccoy@haystacks.org>
To: "Grant Peel" <gpeel@thenetnow.com>
Cc: <freebsd-questions@freebsd.org>
Sent: Friday, March 25, 2005 10:59 AM
Subject: Re: sFTP nologin


> Grant Peel wrote:
>> Is there a quick - secure way to allow the sshd sFTP subsystem to allows 
>> sftp connections without allowing shell accounts?
>
> Create the account and set its shell to /sbin/nologin.  You can safely add 
> that to /etc/shells: it does its name and just prints a terse message 
> before booting the user if he tries to connect via vanilla SSH.
>
> 




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?004b01c53155$5ce59c60$6401a8c0>