Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 29 Mar 2005 14:48:14 +0200 (CEST)
From:      Svein Halvor Halvorsen <svein-freebsd-questions@theloosingend.net>
To:        Grant Peel <gpeel@thenetnow.com>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: sFTP nologin
Message-ID:  <20050329144605.N85495@maren.thelosingend.net>
In-Reply-To: <002c01c53145$b9c64390$6401a8c0@GRANT>
References:  <002c01c53145$b9c64390$6401a8c0@GRANT>

next in thread | previous in thread | raw e-mail | index | archive | help

* Grant Peel [2005-03-25 09:19 -0500]
>  Is there a quick - secure way to allow the sshd sFTP subsystem to allows sftp
>  connections without allowing shell accounts?


I'm using this shell-script as a "nologin"-shell:

-------------
#!/bin/sh
if [ "$1" = "-c" -a "$2" = "/usr/libexec/sftp-server" ]; then

    exec /bin/sh "$@"

else

    echo "You are not allowed to login"
    sleep 2
    exit 0

fi
-------------


This will allow sftp, but not shell login (or scp)




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20050329144605.N85495>