From owner-freebsd-questions@FreeBSD.ORG Fri Apr 25 14:10:12 2008 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 0EF6F106566C for ; Fri, 25 Apr 2008 14:10:12 +0000 (UTC) (envelope-from begeert@gmail.com) Received: from nf-out-0910.google.com (nf-out-0910.google.com [64.233.182.191]) by mx1.freebsd.org (Postfix) with ESMTP id 7FA568FC12 for ; Fri, 25 Apr 2008 14:10:11 +0000 (UTC) (envelope-from begeert@gmail.com) Received: by nf-out-0910.google.com with SMTP id b2so1923575nfb.33 for ; Fri, 25 Apr 2008 07:10:10 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:subject:from:to:content-type:date:message-id:mime-version:x-mailer:content-transfer-encoding; bh=T/SHQKTFetLD6b6QSDeMI8il+o6bJWGfVBPBc9KfbMU=; b=tReP7zKuwZsMOt87rIzF6W0AIWwH5WgoG7Mh0soJ5JgRb8mlAUU1sVousEDf0tRV0TrlYXmkuZTRvkl1Tj8V67QT/ukGKgR/VBWYA3zWILqvopLHTzb4vpr0mBH1orwplC6Q9SUXWzYpVMnKDMyVNK1WOMTnnUekd3fqPxir3/o= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=subject:from:to:content-type:date:message-id:mime-version:x-mailer:content-transfer-encoding; b=e6z9DVnmBT9uP2X7FCJ3+E26XUbj3F07tB7I0D0nvAfYa1Tc8wixp/2fl86gjywPPx1VWHZo5zrFJz2KGy8CQ1XKmMksBfYUlek8c+czR/8fqX81OSMrjPkhXimbrJAKoGKspVEZnbeHwhcl3BlJAVZzG4H4HZTQZZONbP4F1AU= Received: by 10.210.143.11 with SMTP id q11mr2397304ebd.140.1209131163948; Fri, 25 Apr 2008 06:46:03 -0700 (PDT) Received: from ?192.168.1.101? ( [81.171.12.15]) by mx.google.com with ESMTPS id g17sm2834782nfd.10.2008.04.25.06.46.02 (version=TLSv1/SSLv3 cipher=RC4-MD5); Fri, 25 Apr 2008 06:46:03 -0700 (PDT) From: Geert Geurts To: freebsd-questions@freebsd.org Content-Type: text/plain Date: Fri, 25 Apr 2008 15:46:01 +0200 Message-Id: <1209131161.14700.4.camel@puk> Mime-Version: 1.0 X-Mailer: Evolution 2.22.1 Content-Transfer-Encoding: 7bit Subject: restrict ssh access X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 25 Apr 2008 14:10:12 -0000 Hello, I've got a server running a ssh server, I want to enable ssh for the use of sftp by a group of users, and limit their ssh access to just allow running passwd so they can change their default password. What whould be the best/easiest way to acomplish this, or something similiar? Greetings, Geert