Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 20 Apr 2004 14:10:05 +0800
From:      Robert Storey <y2kbug@ms25.hinet.net>
To:        freebsd-questions@freebsd.org
Subject:   Re: restricting ssh to authorized users
Message-ID:  <20040420141005.5a3241de.y2kbug@ms25.hinet.net>
In-Reply-To: <20040420023305.GA19605@charade.trit.org>
References:  <20040420102506.120a0298.y2kbug@ms25.hinet.net> <20040420023305.GA19605@charade.trit.org>

next in thread | previous in thread | raw e-mail | index | archive | help
Thanks Andy, that was easy. Wish all the solutions to my sysadmin
questions were so simple.

best regards,
Robert

On Tue, 20 Apr 2004 02:33:05 +0000
Andy Miller <andy@trit.org> wrote:

> On Tue, Apr 20, 2004 at 10:25:06AM +0800, Robert Storey wrote:
> > I've been wondering what is the best way to prevent certain users from
> > being able to login with ssh, even though I want to allow them ftp
> > access?
> > 
> > The opposite is easy to accomplish - if I put somebody's name in file
> > /etc/ftpusers, that person cannot login with ftp, but they could still
> > login with ssh. But I don't see a file /etc/sshusers, and I'm
> > wondering if there is some equivalent.
> 
> If you don't want someone to be able to login, you can change their
> login shell to /sbin/nologin.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20040420141005.5a3241de.y2kbug>