From owner-freebsd-questions Mon May 13 14:46:41 2002 Delivered-To: freebsd-questions@freebsd.org Received: from cody.jharris.com (cody.jharris.com [205.238.128.83]) by hub.freebsd.org (Postfix) with ESMTP id E332737B403 for ; Mon, 13 May 2002 14:46:36 -0700 (PDT) Received: from localhost (nick@localhost) by cody.jharris.com (8.11.1/8.9.3) with ESMTP id g4DM2iH53176; Mon, 13 May 2002 17:02:44 -0500 (CDT) (envelope-from nick@rogness.net) Date: Mon, 13 May 2002 17:02:44 -0500 (CDT) From: Nick Rogness X-Sender: nick@cody.jharris.com To: Daniel Blankensteiner Cc: freebsd-questions@FreeBSD.ORG Subject: Re: FTPd and SSHd In-Reply-To: <20020513211947.BILF22598.fepC.post.tele.dk@there> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG On Mon, 13 May 2002, Daniel Blankensteiner wrote: > Hi all > > I have ftpd and sshd running on my 4.5 Stable box.. > > * Some user may access the server via ssh, but not ftp, so I put the > user in /etc/ftpusers > > * Some user may access the server via ftp, but not ssh, so I don't put > the user in AllowUsers in /etc/ssh/sshd_config. > > But now comes the problem with sftp. I want to allow users to access > sftp, but not ssh, how do I do this? I also want to /etc/ftpchroot the > users, but sftp-server does not support this? Simple and easy solution, shut off their shell access. Use /sbin/nologin or something for their shell (in the password file). > > Some users access the "normal" ftp, but the problem here is that user > in the group "gang" have a shared upload dir, but they can not access > it (there is a symlink in their home dir to the upload dir) when they > are in /etc/ftpchroot. How do I work around this? > Nick Rogness - Don't mind me...I'm just sniffing your packets To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message