Re: Turning off shell access

2006-03-17 Thread Bob Proulx
Dave Sherohman wrote: > There are actually a few things which complain about shells that > aren't in /etc/shells, so I usually add /bin/false to that list. That's not a good idea. Programs such as ftpd which don't run the shell will now think that users with /bin/false as a shell are fully allowe

Re: Turning off shell access

2006-03-14 Thread Dave Sherohman
On Tue, Mar 14, 2006 at 04:00:29PM -0500, Andrew Cady wrote: > On Tue, Mar 14, 2006 at 08:32:06PM +, Arnór Kristjánsson wrote: > > How can I turn off shell access (through SSH) for certain users? > > If you want to disable all shell access (including local) then set the > user's login shell to

Re: Turning off shell access

2006-03-14 Thread Yann Lejeune
On 2006/03/14-20:32(+), Arnór Kristjánsson wrote : > How can I turn off shell access (through SSH) for certain users? > You can use the AllowUsers directive in your sshd_config to specify allowed users. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble

Re: Turning off shell access

2006-03-14 Thread Andrew Cady
On Tue, Mar 14, 2006 at 08:32:06PM +, Arnór Kristjánsson wrote: > How can I turn off shell access (through SSH) for certain users? If you want to disable all shell access (including local) then set the user's login shell to something not in /etc/shells (/bin/false is a good choice). If you wa

Re: Turning off shell access

2006-03-14 Thread Roberto C. Sanchez
anoop aryal wrote: > On Tuesday 14 March 2006 02:32 pm, Arnór Kristjánsson wrote: > >>How can I turn off shell access (through SSH) for certain users? > > > "/bin/false" in the last field of /etc/passwd for that user should do the > trick. > Better yet, add something like this at the end of /

Re: Turning off shell access

2006-03-14 Thread anoop aryal
On Tuesday 14 March 2006 02:32 pm, Arnór Kristjánsson wrote: > How can I turn off shell access (through SSH) for certain users? "/bin/false" in the last field of /etc/passwd for that user should do the trick. -- anoop [EMAIL PROTECTED]