restricting ssh to authorized users

Robert Storey y2kbug at
Mon Apr 19 23:27:09 PDT 2004

Thanks Andy, that was easy. Wish all the solutions to my sysadmin
questions were so simple.

best regards,

On Tue, 20 Apr 2004 02:33:05 +0000
Andy Miller <andy at> wrote:

> On Tue, Apr 20, 2004 at 10:25:06AM +0800, Robert Storey wrote:
> > I've been wondering what is the best way to prevent certain users from
> > being able to login with ssh, even though I want to allow them ftp
> > access?
> > 
> > The opposite is easy to accomplish - if I put somebody's name in file
> > /etc/ftpusers, that person cannot login with ftp, but they could still
> > login with ssh. But I don't see a file /etc/sshusers, and I'm
> > wondering if there is some equivalent.
> If you don't want someone to be able to login, you can change their
> login shell to /sbin/nologin.

More information about the freebsd-questions mailing list