*BSD News Article 63570


Return to BSD News archive

#! rnews 1303 bsd
Path: euryale.cc.adfa.oz.au!newshost.anu.edu.au!newshost.nla.gov.au!act.news.telstra.net!psgrain!usenet.eel.ufl.edu!newsfeed.internetmci.com!in2.uu.net!news.tacom.army.mil!reason.cdrom.com!usenet
From: "Jordan K. Hubbard" <jkh@FreeBSD.org>
Newsgroups: comp.unix.bsd.freebsd.misc
Subject: Re: How to permit FTP w/o giving shell access?
Date: Mon, 11 Mar 1996 19:26:16 -0800
Organization: Walnut Creek CDROM
Lines: 17
Message-ID: <3144EED8.41C67EA6@FreeBSD.org>
References: <4i0p0k$jtj@muenchen.photogrammetrie.de>
NNTP-Posting-Host: time.cdrom.com
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
X-Mailer: Mozilla 2.0 (X11; I; FreeBSD 2.2-CURRENT i386)
To: Gerhard Mehldau <mehldau@photogrammetrie.de>

Gerhard Mehldau wrote:
> I would like to give some users access to a (FreeBSD 2.1)
> system *without* allowing them to login directly.  I've
> tried setting their shell to /nonexistent, but that also
> prevents them from using ftp.  Any ideas?

I guess you could make their shell /bin/sh and then give them a .profile
that says:

exit 0

In it.  There _might_ be a race here if your system is slow enough which
lets them hit ^C before the exit, but I rather doubt that they'd have an
easy time hitting it.
-- 
- Jordan Hubbard
  President, FreeBSD Project