What I've done along these lines is to set up an sshusers group then set ssh to restrict to that group.
If you are using commerical ssh, they have a dummy shell you can set up for sftp only users. > From: Choman [mailto:[EMAIL PROTECTED]] > can't seem to find what I'm looking for. Basically, I would like to limit > ssh access to only 1 user on my machine (choman), and sftp access to > another user on my machine (choftp). However, choftp is running /bin/false