On Sunday 14 January 2007 14:36, Adrian von Bidder wrote: > I have users a, b, c, d, e. All users except e can have shell > access, but beecause shell access is powerful, must not be able to > log in with password, but only with public key. User e is allowed > to log in with password and is restricted by rssh to only use scp, > sftp or rsync so that even if that password is stolen/guessed, the > attacker can at most deface the hosted web site in e's directory. > > Judging from the replies I've received so far I'll just end up > running a 2nd sshd on port 2222 or wherever.
Openssh 4.4 supports per user configuration. But I don't think it will get into Debian before Etch's release. Cheers, Stefan

