Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 24 Aug 2003 13:24:01 +0930
From:      Malcolm Kay <malcolm.kay@internode.on.net>
To:        "H.Wade Minter" <minter@lunenburg.org>, questions@freebsd.org
Subject:   Re: vsftpd port not honoring /etc/shells
Message-ID:  <200308241324.01663.malcolm.kay@internode.on.net>
In-Reply-To: <BE15D5BE-D57A-11D7-9C7A-000393C3212A@lunenburg.org>
References:  <BE15D5BE-D57A-11D7-9C7A-000393C3212A@lunenburg.org>

next in thread | previous in thread | raw e-mail | index | archive | help
On Sun, 24 Aug 2003 00:31, H.Wade Minter wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> I installed the vsftpd port on my RELENG_4_8 system as a replacement
> for the standard ftpd.  However, it doesn't appear to be honoring
> /etc/shells - a user listed in the passwd file with a shell
> (/sbin/nologin) that does not appear in /etc/shells is still allowed to
> FTP into the system.
>
> I'm guessing this may be a problem with PAM, as I have
> "check_shell=3DYES" in /usr/local/etc/vsftpd.conf, and the manpage for
> vsftpd.conf says that this setting is only valid for non-PAM builds.
> But I'm stumped as to how to lock down users via /etc/shells in the
> default port build.
>

Just a thought;
Have you looked at sftp

Malcolm Kay



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200308241324.01663.malcolm.kay>