Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 25 Mar 2005 10:59:10 -0500
From:      Eric McCoy <emccoy@haystacks.org>
To:        Grant Peel <gpeel@thenetnow.com>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: sFTP nologin
Message-ID:  <4244354E.10401@haystacks.org>
In-Reply-To: <002c01c53145$b9c64390$6401a8c0@GRANT>
References:  <002c01c53145$b9c64390$6401a8c0@GRANT>

next in thread | previous in thread | raw e-mail | index | archive | help
Grant Peel wrote:
> Is there a quick - secure way to allow the sshd sFTP subsystem to allows 
> sftp connections without allowing shell accounts?

Create the account and set its shell to /sbin/nologin.  You can safely 
add that to /etc/shells: it does its name and just prints a terse 
message before booting the user if he tries to connect via vanilla SSH.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4244354E.10401>