Shell Accounts

Shell Accounts

[Rejean Proulx]

I have an account that I want to use for ftp only and I don't want people
logging in to.  How to I stop them?

 Rejean Proulx
Visit my family at http://interfree.ca
MSN is: rejp@rogers.com
Ham License VA3REJ

Re: Shell Accounts

[Shaun Oliver]

make the ftp shell /bin/false

-- 
Shaun Oliver


"I refuse to have a battle of wits with an unarmed person."
email: shaun_oliver@optusnet.com.au
WEB: http://blindman.homelinux.org/
IRC: irc.awesomechat.net:6666
IRCNICK: blindman

Re: Shell Accounts

[Ari Moisio]

Hi!

 As root:a

chsh -s /bin/false user_id

  You can verify this tryint to become that user

su - user_id



-- 
arimo

On Wed, 3 Dec 2003, Rejean Proulx wrote:

> I have an account that I want to use for ftp only and I don't want people
> logging in to.  How to I stop them?
>
>  Rejean Proulx
> Visit my family at http://interfree.ca
> MSN is: rejp@rogers.com
> Ham License VA3REJ
>
>
> _______________________________________________
> Speakup mailing list
> Speakup@braille.uwo.ca
> http://speech.braille.uwo.ca/mailman/listinfo/speakup
>

Re: Shell Accounts

[Rejean Proulx]

What does that mean?  is this a command?  is it a file that you modify?  is
it an ftp directive?

 Rejean Proulx
Visit my family at http://interfree.ca
MSN is: rejp@rogers.com
Ham License VA3REJ

----- Original Message ----- 
From: "Shaun Oliver" <shaun_oliver@optusnet.com.au>
To: "Speakup is a screen review system for Linux." <speakup@braille.uwo.ca>
Sent: Wednesday, December 03, 2003 7:09 AM
Subject: Re: Shell Accounts


> make the ftp shell /bin/false
>
> -- 
> Shaun Oliver
>
>
> "I refuse to have a battle of wits with an unarmed person."
> email: shaun_oliver@optusnet.com.au
> WEB: http://blindman.homelinux.org/
> IRC: irc.awesomechat.net:6666
> IRCNICK: blindman
>
> _______________________________________________
> Speakup mailing list
> Speakup@braille.uwo.ca
> http://speech.braille.uwo.ca/mailman/listinfo/speakup

Re: Shell Accounts

[Rejean Proulx]

Thanks,  I learn about yet another command.

 Rejean Proulx
Visit my family at http://interfree.ca
MSN is: rejp@rogers.com
Ham License VA3REJ

----- Original Message ----- 
From: "Ari Moisio" <armoi@sci.fi>
To: "Speakup is a screen review system for Linux." <speakup@braille.uwo.ca>
Sent: Wednesday, December 03, 2003 7:25 AM
Subject: Re: Shell Accounts


> Hi!
>
>  As root:a
>
> chsh -s /bin/false user_id
>
>   You can verify this tryint to become that user
>
> su - user_id
>
>
>
> -- 
> arimo
>
> On Wed, 3 Dec 2003, Rejean Proulx wrote:
>
> > I have an account that I want to use for ftp only and I don't want
people
> > logging in to.  How to I stop them?
> >
> >  Rejean Proulx
> > Visit my family at http://interfree.ca
> > MSN is: rejp@rogers.com
> > Ham License VA3REJ
> >
> >
> > _______________________________________________
> > Speakup mailing list
> > Speakup@braille.uwo.ca
> > http://speech.braille.uwo.ca/mailman/listinfo/speakup
> >
>
> _______________________________________________
> Speakup mailing list
> Speakup@braille.uwo.ca
> http://speech.braille.uwo.ca/mailman/listinfo/speakup

Re: Shell Accounts

[Joseph C. Lininger]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi,
The way I do this is as follows. First, add the following to the end
of your /etc/shells file.

/bin/nologin

This way, your ftp server will consider /bin/nologin a valid shell.
Now, create /bin/nologin as follows:

#!/usr/bin/tail +2
Sorry, but logins for this account are disabled.
It is being used only to provide a service.

Now make this executable with this command:

chmod 755 /bin/nologin

Finally, set the shell of the account you want to block logins for to
/bin/nologin.

There are other ways to do this, but I like this one because it
provides an explanatory message to those trying to log in. Anyone
attempting to login to the account will receive the following
message:

Sorry, but logins for this account are disabled.
It is being used only to provide a service.

Once the message is printed, the connection will be promptly
terminated.
- ---
Joseph C. Lininger
jbahm@pcdesk.net
- ----- Original Message ----- 
From: "Rejean Proulx" <rejean@interfree.ca>
To: <speakup@braille.uwo.ca>
Sent: Wednesday, December 03, 2003 4:54 AM
Subject: Shell Accounts


> I have an account that I want to use for ftp only and I don't want
> people logging in to.  How to I stop them?
> 
>  Rejean Proulx
> Visit my family at http://interfree.ca
> MSN is: rejp@rogers.com
> Ham License VA3REJ
> 
> 
> _______________________________________________
> Speakup mailing list
> Speakup@braille.uwo.ca
> http://speech.braille.uwo.ca/mailman/listinfo/speakup

-----BEGIN PGP SIGNATURE-----
Version: PGP 8.0.3

iQA/AwUBP86pNyenap9Jqj2wEQIJ6wCaAr0XXT4C25od2hMgbTF/ah13+4AAn018
jn+LkFTDM44J5JmfCsjqa9XJ
=1NGL
-----END PGP SIGNATURE-----

Re: Shell Accounts

[Joseph C. Lininger]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

If your using proftpd, this won't work because proftpd requires a
valid shell. That is, one listed in /etc/shells. You have two choices
here. Either add the line to /etc/shells, or set RequireValidShell to
off in /etc/proftpd.conf.
- ---
Joseph C. Lininger
jbahm@pcdesk.net
- ----- Original Message ----- 
From: "Shaun Oliver" <shaun_oliver@optusnet.com.au>
To: "Speakup is a screen review system for Linux."
<speakup@braille.uwo.ca>
Sent: Wednesday, December 03, 2003 5:09 AM
Subject: Re: Shell Accounts


> make the ftp shell /bin/false
> 
> -- 
> Shaun Oliver
> 
> 
> "I refuse to have a battle of wits with an unarmed person."
> email: shaun_oliver@optusnet.com.au
> WEB: http://blindman.homelinux.org/
> IRC: irc.awesomechat.net:6666
> IRCNICK: blindman
> 
> _______________________________________________
> Speakup mailing list
> Speakup@braille.uwo.ca
> http://speech.braille.uwo.ca/mailman/listinfo/speakup

-----BEGIN PGP SIGNATURE-----
Version: PGP 8.0.3

iQA/AwUBP86plienap9Jqj2wEQIWHgCg0al8ZFcx6MlpJ6kQQptGmQyt19gAoNFa
QfLyqH03RfUnrZeUGv2aaWu5
=d5z4
-----END PGP SIGNATURE-----

Re: Shell Accounts

[Shaun Oliver]

/bin/false is used in nonlogin shells
in your /etc/passwd change the ftp user account's shell to /bin/false

-- 
Shaun Oliver


"I refuse to have a battle of wits with an unarmed person."
email: shaun_oliver@optusnet.com.au
WEB: http://blindman.homelinux.org/
IRC: irc.awesomechat.net:6666
IRCNICK: blindman