Am Di, den 03.05.2005 schrieb M E Fieu um 13:17:
> If you want to allow certain users sftp only access
> and not ssh or any
> other service access you could change out the users
> shell with the
> sftp-server binary. This will allow users to sftp
> into the machine in
> question, but allow them access to no other
> services.
Sorry for my stupidness, could you explain what is
mean by "change out the users shell with the
sftp-server binary"?? Can provide a example if it is
easy ?
/etc/passwd:
adalloz:x:500:500:Alexander Dalloz:/home/adalloz:/bin/bash
becomes by using "vipw" or "chsh":
adalloz:x:500:500:Alexander
Dalloz:/home/adalloz:/usr/libexec/openssh/sftp-server
(Not my recommendation, but what you ask as an explanation for.)
Alexander
--
Alexander Dalloz | Enger, Germany | GPG
http://pgp.mit.edu 0xB366A773
legal statement:
http://www.uni-x.org/legal.html
Fedora Core 2 GNU/Linux on Athlon with kernel 2.6.11-1.14_FC2smp
Serendipity 14:49:36 up 22:55, 18 users, 0.13, 0.11, 0.09