restricting certain users to certain things (pam?)

[kitsune]

On Fri, 28 Mar 2003 10:46:59 -0500 (EST)
Michael Grant <mg-fbsd3 at grant.org> wrote:

> I have a requirement to restrict certain users to logging in in
> certain ways.  For example, some users can ftp, others can ftp, ssh,
> and get a shell, other users can relay mail using auth login.
> 
> I am pretty sure I can do this though pam.conf.  Has anyone actually
> done this?  Can someone slide me some examples?

Check out /etc/ftpusers to remove the ability to access ftp.

To allow ftp but no shell access check out /etc/shells.

Not sure about mail...