Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 7 Jul 2000 14:45:00 -0400 (EDT)
From:      Jason T <luser@ahab.com>
To:        "Richard E. Hawkins" <hawk@fac13.ds.psu.edu>
Cc:        Michael <cadaver@tucu.net>, freebsd-questions@FreeBSD.ORG
Subject:   Re: allowing ftp logins but not shell logins 
Message-ID:  <Pine.BSF.4.21.0007071436250.1440-100000@localhost>
In-Reply-To: <200007071730.NAA99997@fac13.ds.psu.edu>

next in thread | previous in thread | raw e-mail | index | archive | help

Set /sbin/nologin as the shell!  You need to put it into /etc/shells for
this to work...

Even more restrictive, you can set up semi-anonymous ftp... check man ftpd
for this, but basically, by creating incoming and pub directories for an
ftp-only user and putting the username into /etc/ftpchroot, you can
restrict it further so that users can upload files into incoming and
download files from pub, but they must log in... So it's like anonymous
ftp, but with a login.

Of course, if you use any ported ftp daemons, like the popular (and
security-buggy) wu-ftpd, refer to the appropriate manpages.


On Fri, 7 Jul 2000, Richard E. Hawkins wrote:

> 
> > What I would like to have is something where persons can drop off files in
> > a certain directory and the files would be owned by a user foo or by a
> > group foo. How can I go about setting this up. Pointers to man pages or
> > anything else would be greatly appreciated.
> 
> I can't tell you whether or not it's the *best* way, but you can make 
> their login shell /usr/bin/false, which means that a succesful login 
> merely runs false and exits . . .
> 
> hawk
> 
> 
> 
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-questions" in the body of the message
> 



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.21.0007071436250.1440-100000>