Date: Wed, 20 Dec 2000 13:29:21 -0600 From: Marius Strom <marius@marius.org> To: bv@wjv.com Cc: freebsd-isp@FreeBSD.ORG Subject: Re: FTP access without shell Message-ID: <20001220132921.T31301@marius.org> In-Reply-To: <20001220141227.B34077@wjv.com>; from bill@wjv.com on Wed, Dec 20, 2000 at 02:12:28PM -0500 References: <NEBBKOCAGLBGBAGEIHPIGECLCEAA.dave@siteone.net> <20001220141227.B34077@wjv.com>
next in thread | previous in thread | raw e-mail | index | archive | help
Another typical practice is to use both /bin/true and /bin/false. You put /bin/true in your shells, and give /bin/true to all users who want ftp access, and /bin/false those you don't. This way, you can create non-interactive and non-ftp accounts for things such as email only accounts. On Wed, Dec 20, 2000 at 02:12:28PM -0500, Bill Vermillion wrote: > On Wed, Dec 20, 2000 at 01:30:07PM -0500, David Lawson thus spoke: > > > I'm trying to give a user ftp access but not shell access when I > > set their shell to /sbin/nologin ftp says access denied but if it > > is set to a working shell ftp is fine. > > I use /bin/false - a habit from a long time ago, and just > added that to the /etc/shells. I then also put their entry > into /etc/ftpchroot and all seems to work just fine. > > > -- > Bill Vermillion - bv @ wjv . com > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-isp" in the body of the message -- Marius Strom <marius@marius.org> Professional Geek/Unix System Administrator URL: http://www.marius.org http://www.marius.org/marius.pgp 0x55DE53E4 "Never underestimate the bandwidth of a mini-van full of DLT tapes traveling down the highway at 65 miles per hour..." -Andrew Tanenbaum, "Computer Networks" To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20001220132921.T31301>