restricting ssh to authorized users

Andy Miller andy at trit.org
Mon Apr 19 19:33:06 PDT 2004


On Tue, Apr 20, 2004 at 10:25:06AM +0800, Robert Storey wrote:
> I've been wondering what is the best way to prevent certain users from
> being able to login with ssh, even though I want to allow them ftp access?
> 
> The opposite is easy to accomplish - if I put somebody's name in file
> /etc/ftpusers, that person cannot login with ftp, but they could still
> login with ssh. But I don't see a file /etc/sshusers, and I'm wondering if
> there is some equivalent.

If you don't want someone to be able to login, you can change their
login shell to /sbin/nologin.

--
Andy Miller
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-questions/attachments/20040420/a0b2b129/attachment.bin


More information about the freebsd-questions mailing list