From owner-freebsd-questions@FreeBSD.ORG Fri Mar 25 16:17:07 2005 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 2363516A4CE for ; Fri, 25 Mar 2005 16:17:07 +0000 (GMT) Received: from post-24.mail.nl.demon.net (post-24.mail.nl.demon.net [194.159.73.194]) by mx1.FreeBSD.org (Postfix) with ESMTP id 83F2F43D49 for ; Fri, 25 Mar 2005 16:17:06 +0000 (GMT) (envelope-from albi@scii.nl) Received: from aseed.demon.nl ([83.160.138.119]:10059 helo=mail.aseed.antenna.nl) by post-24.mail.nl.demon.net with esmtp (Exim 4.43) id 1DErUf-0004u2-Jp; Fri, 25 Mar 2005 16:17:05 +0000 Received: from http.aseed.antenna.nl (unknown [192.168.0.50]) by mail.aseed.antenna.nl (Postfix) with ESMTP id 0C60C2841A7; Fri, 25 Mar 2005 17:19:31 +0100 (CET) Received: from localhost.localdomain (f80052.upc-f.chello.nl [80.56.80.52]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by http.aseed.antenna.nl (Postfix) with ESMTP id F31D458C826; Fri, 25 Mar 2005 17:17:11 +0100 (CET) Date: Fri, 25 Mar 2005 17:17:04 +0100 From: "albi@scii.nl" To: Grant Peel Message-Id: <20050325171704.7bae4034.albi@scii.nl> In-Reply-To: <004b01c53155$5ce59c60$6401a8c0@GRANT> References: <002c01c53145$b9c64390$6401a8c0@GRANT> <4244354E.10401@haystacks.org> <004b01c53155$5ce59c60$6401a8c0@GRANT> X-Mailer: Sylpheed version 1.0.0 (GTK+ 1.2.10; i386-pc-linux-gnu) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit cc: freebsd-questions@freebsd.org Subject: Re: sFTP nologin X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 25 Mar 2005 16:17:07 -0000 On Fri, 25 Mar 2005 11:11:51 -0500 "Grant Peel" wrote: > Yes, been trying that all morning. sbin/nologin kills the connection > after it prints the message. > > i have been tring scponly it has been less that workable so far too. you could set up a jail for that user (or group of users) and let them do regular ftp within localhost from the jail to your host-system, then they have a restricted shell and still can upload/download