From owner-freebsd-current@FreeBSD.ORG  Wed Feb 25 11:03:07 2004
Return-Path: <owner-freebsd-current@FreeBSD.ORG>
Delivered-To: freebsd-current@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP
	id 1462F16A4CE; Wed, 25 Feb 2004 11:03:07 -0800 (PST)
Received: from kientzle.com (h-66-166-149-50.SNVACAID.covad.net
	[66.166.149.50])	by mx1.FreeBSD.org (Postfix) with ESMTP
	id EF0A043D1F; Wed, 25 Feb 2004 11:03:05 -0800 (PST)
	(envelope-from tim@kientzle.com)
Received: from kientzle.com (54.kientzle.com [66.166.149.54] (may be forged))
	by kientzle.com (8.12.9/8.12.9) with ESMTP id i1PJ1b7g008415;
	Wed, 25 Feb 2004 11:01:37 -0800 (PST)
	(envelope-from tim@kientzle.com)
Message-ID: <403CF111.3090801@kientzle.com>
Date: Wed, 25 Feb 2004 11:01:37 -0800
From: Tim Kientzle <tim@kientzle.com>
User-Agent: Mozilla/5.0 (X11; U; FreeBSD i386; en-US; rv:1.4) Gecko/20031006
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: Ceri Davies <ceri@submonkey.net>
References: <6.0.1.1.1.20040223171828.03de8b30@imap.sfu.ca>
	<20040224223659.GB69570@VARK.homeunix.com>
	<6.0.1.1.1.20040224225502.03dcfb10@imap.sfu.ca>
	<403BE4BC.9070009@kientzle.com> <403BE803.40606@FreeBSDsystems.COM>
	<403BEFFB.3010702@kientzle.com> <20040225100005.GV45593@submonkey.net>
In-Reply-To: <20040225100005.GV45593@submonkey.net>
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
cc: David Schultz <das@freebsd.org>
cc: freebsd-current@freebsd.org
cc: Colin Percival <colin.percival@wadham.ox.ac.uk>
cc: Lanny Baron <lnb@FreeBSDsystems.COM>
cc: kientzle@acm.org
Subject: Re: What to do about nologin(8)?
X-BeenThere: freebsd-current@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
Reply-To: kientzle@acm.org
List-Id: Discussions about the use of FreeBSD-current
	<freebsd-current.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-current>,
	<mailto:freebsd-current-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-current>
List-Post: <mailto:freebsd-current@freebsd.org>
List-Help: <mailto:freebsd-current-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-current>,
	<mailto:freebsd-current-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 25 Feb 2004 19:03:07 -0000

Ceri Davies wrote:
> On Tue, Feb 24, 2004 at 04:44:43PM -0800, Tim Kientzle wrote:
>> Lanny Baron wrote:
>>
>>>What I have done in the past for preventing logins via telnet/ssh is to 
>>>make a script called ftponly and put it in /usr/local/bin and in 
>>>/etc/shells put a line as /usr/local/bin/ftponly
>>
>>1) Why did you put it in /etc/shells?
> 
> What am I missing here?  ftpd(8) says:
> 
>            4.   The user must have a standard shell returned by
>                 getusershell(3).

I think the question is:  What was *I* missing?
You've found it.  Thanks for the pointer.

Tim