Re: restricting ssh to authorized users

2004-04-20 Thread Robert Storey
Thanks Andy, that was easy. Wish all the solutions to my sysadmin
questions were so simple.

best regards,
Robert

On Tue, 20 Apr 2004 02:33:05 +
Andy Miller [EMAIL PROTECTED] wrote:

 On Tue, Apr 20, 2004 at 10:25:06AM +0800, Robert Storey wrote:
  I've been wondering what is the best way to prevent certain users from
  being able to login with ssh, even though I want to allow them ftp
  access?
  
  The opposite is easy to accomplish - if I put somebody's name in file
  /etc/ftpusers, that person cannot login with ftp, but they could still
  login with ssh. But I don't see a file /etc/sshusers, and I'm
  wondering if there is some equivalent.
 
 If you don't want someone to be able to login, you can change their
 login shell to /sbin/nologin.
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


restricting ssh to authorized users

2004-04-19 Thread Robert Storey
I've been wondering what is the best way to prevent certain users from
being able to login with ssh, even though I want to allow them ftp access?

The opposite is easy to accomplish - if I put somebody's name in file
/etc/ftpusers, that person cannot login with ftp, but they could still
login with ssh. But I don't see a file /etc/sshusers, and I'm wondering if
there is some equivalent.

TIA,
Robert


___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: restricting ssh to authorized users

2004-04-19 Thread Andy Miller
On Tue, Apr 20, 2004 at 10:25:06AM +0800, Robert Storey wrote:
 I've been wondering what is the best way to prevent certain users from
 being able to login with ssh, even though I want to allow them ftp access?
 
 The opposite is easy to accomplish - if I put somebody's name in file
 /etc/ftpusers, that person cannot login with ftp, but they could still
 login with ssh. But I don't see a file /etc/sshusers, and I'm wondering if
 there is some equivalent.

If you don't want someone to be able to login, you can change their
login shell to /sbin/nologin.

--
Andy Miller

pgp0.pgp
Description: PGP signature