restricting ssh to authorized users

[Robert Storey]

Thanks Andy, that was easy. Wish all the solutions to my sysadmin
questions were so simple.

best regards,
Robert

On Tue, 20 Apr 2004 02:33:05 +0000
Andy Miller <andy at trit.org> wrote:

> On Tue, Apr 20, 2004 at 10:25:06AM +0800, Robert Storey wrote:
> > I've been wondering what is the best way to prevent certain users from
> > being able to login with ssh, even though I want to allow them ftp
> > access?
> > 
> > The opposite is easy to accomplish - if I put somebody's name in file
> > /etc/ftpusers, that person cannot login with ftp, but they could still
> > login with ssh. But I don't see a file /etc/sshusers, and I'm
> > wondering if there is some equivalent.
> 
> If you don't want someone to be able to login, you can change their
> login shell to /sbin/nologin.