restricting certain users to certain things (pam?)

kitsune kitbsdlists at
Sat Mar 29 11:04:08 PST 2003

On Fri, 28 Mar 2003 10:46:59 -0500 (EST)
Michael Grant <mg-fbsd3 at> wrote:

> I have a requirement to restrict certain users to logging in in
> certain ways.  For example, some users can ftp, others can ftp, ssh,
> and get a shell, other users can relay mail using auth login.
> I am pretty sure I can do this though pam.conf.  Has anyone actually
> done this?  Can someone slide me some examples?

Check out /etc/ftpusers to remove the ability to access ftp.

To allow ftp but no shell access check out /etc/shells.

Not sure about mail...

More information about the freebsd-questions mailing list