Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 10 Feb 2005 12:42:05 -0600
From:      Dan Nelson <dnelson@allantgroup.com>
To:        "Dixit, Viraj" <Viraj.Dixit@CityofPaloAlto.org>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: Telnet and FTP issues on 5.3
Message-ID:  <20050210184205.GA86873@dan.emsphone.com>
In-Reply-To: <ED759F1DC5ADD74592DD063B1EDEDAF803ACD2BE@cc-mail.staff.copa>
References:  <ED759F1DC5ADD74592DD063B1EDEDAF803ACD2BE@cc-mail.staff.copa>

next in thread | previous in thread | raw e-mail | index | archive | help
In the last episode (Feb 10), Dixit, Viraj said:
> I have been searching for few days everywhere an answer to this
> question. Is there a way to stop telnet access for a group let's say
> ftponly but allow them to have FTP access in FreeBSD 5.3. I know this
> works in my old system BSD OS 4.3. The commands are like this in
> login.conf file in BSD OS 4.3.
> 
> #restrict telnet for ftponly group only
> ftponly:\
>    :auth-network=reject:\
>    :auth-ftp=passwd:

One way to do this is to set the user's shell to /usr/sbin/nologin and
add /usr/sbin/nologin to the /etc/shells file.  They won't be able to
telnet or ssh in, but they will be able to ftp.

-- 
	Dan Nelson
	dnelson@allantgroup.com



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20050210184205.GA86873>