From owner-freebsd-questions Thu May 11 20:30:20 2000 Delivered-To: freebsd-questions@freebsd.org Received: from smtp.millennium20.com (smtp.thecyberguys.net [209.79.190.13]) by hub.freebsd.org (Postfix) with ESMTP id 7431737B7B7 for ; Thu, 11 May 2000 20:30:17 -0700 (PDT) (envelope-from glennpj@bayouhome.net) Received: from gforce.johnson.home (1Cust155.tnt2.covington.la.da.uu.net [63.31.31.155]) by smtp.millennium20.com (8.10.0/8.10.0) with SMTP id e4C2R9302786; Thu, 11 May 2000 19:27:10 -0700 Received: (from glenn@localhost) by gforce.johnson.home (8.9.3/8.9.3) id WAA36983; Thu, 11 May 2000 22:30:10 -0500 (CDT) (envelope-from glenn) From: Glenn Johnson Date: Thu, 11 May 2000 22:29:45 -0500 To: Blake Swensen Cc: Walter Brameld Subject: Re: NIS map for /etc/login.access Message-ID: <20000511222945.A31266@gforce.johnson.home> References: <3.0.16.20000511181559.26ef24a4@mail.pyramus.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailer: Mutt 1.0.1i In-Reply-To: <3.0.16.20000511181559.26ef24a4@mail.pyramus.com>; from blake@pyramus.com on Thu, May 11, 2000 at 06:16:36PM -0700 Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Thu, May 11, 2000 at 06:16:36PM -0700, Blake Swensen wrote: > I have a need to prevent certain clients, who need FTP access, from > telneting into the machines on my network. > > I have been using /etc/login.access to prohibit those users, but it is > a hassle to add an entry in every machine on the network. > > Have also tried to add those users to a NIS'ed group and added the > @groupname to login.access. Login.access must only look at the user's > GID, not the group file, or the NIS map for group. > > Is there a method for NIS'ifying the login.access file or a better > method to allow ftp access but not shell access. You could use rdist to distribute the login.access file. It is part of the base FreeBSD system although I have found the rdist6 port to be more useful as I can use ssh for communication between hosts with it. -- Glenn Johnson glennpj@bayouhome.net To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message