From owner-freebsd-questions  Tue Apr 16 15:57:15 2002
Delivered-To: freebsd-questions@freebsd.org
Received: from blacklamb.mykitchentable.net (ekgr-dsl6-t92.citlink.net [207.173.251.92])
	by hub.freebsd.org (Postfix) with ESMTP id 787F137B419
	for <freebsd-questions@freebsd.org>; Tue, 16 Apr 2002 15:57:12 -0700 (PDT)
Received: from tagalong (unknown [165.107.42.194])
	by blacklamb.mykitchentable.net (Postfix) with SMTP
	id CFB5AEE5A1; Tue, 16 Apr 2002 15:57:10 -0700 (PDT)
Message-ID: <014e01c1e59a$066cc340$c22a6ba5@lc.ca.gov>
From: "Drew Tomlinson" <drew@mykitchentable.net>
To: "Steve Bertrand" <steve@northnetworks.ca>,
	<freebsd-questions@freebsd.org>
References: <1018996924.1786.11.camel@thinkpad1.northnetworks.ca>
Subject: Re: Login woes...
Date: Tue, 16 Apr 2002 15:57:02 -0700
MIME-Version: 1.0
Content-Type: text/plain;
	charset="Windows-1252"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-Mimeole: Produced By Microsoft MimeOLE V6.00.2600.0000
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG

----- Original Message -----
From: "Steve Bertrand" <steve@northnetworks.ca>
To: <freebsd-questions@freebsd.org>
Sent: Tuesday, April 16, 2002 3:42 PM
Subject: Login woes...


> I have found that with unix, any new user created can automatically
> login to the server via ssh, ftp etc.  I have tried the
> nonexistent:nologin technique to no avail.  I can't find documentation
> anywhere on how to configure freeBSD to allow users login to perform
> only specific tasks.  ie.. I would like some of my users to have the
> ability to log into their POP account exclusively.  Other users will
> need access to only ftp, and still others will only need access to ssh
> to scp files to their home.  How can I overcome this limitation so I
can
> have finer control on what users can access on my servers?

I think man login.conf might be what you're looking for.

> Also, not as important, but out of curiosity, how can I 'cap' a users
> ftp home directory so they can not traverse folders above and parallel
> to their home?

I know this is called "chroot" but am not sure how to apply it.

I'm sorry I'm not much help but maybe a nudge is all you need. :)

Drew


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message