sFTP nologin

[Grant Peel]

Yes, been trying that all morning. sbin/nologin kills the connection after 
it prints the message.

i have been tring scponly it has been less that workable so far too.

-GRant




----- Original Message ----- 
From: "Eric McCoy" <emccoy at haystacks.org>
To: "Grant Peel" <gpeel at thenetnow.com>
Cc: <freebsd-questions at freebsd.org>
Sent: Friday, March 25, 2005 10:59 AM
Subject: Re: sFTP nologin


> Grant Peel wrote:
>> Is there a quick - secure way to allow the sshd sFTP subsystem to allows 
>> sftp connections without allowing shell accounts?
>
> Create the account and set its shell to /sbin/nologin.  You can safely add 
> that to /etc/shells: it does its name and just prints a terse message 
> before booting the user if he tries to connect via vanilla SSH.
>
>