[ale] password file users shell set /bin/null?

[Bao C. Ha]

Put /bin/null into the file /etc/shells.  Ftpd does not use
a shell, but it is fooled into thinking that /bin/null is 
a valid shell and let ftp users connected.  All others
requiring a valid shell to login will fail miserably.

Bao

> -----Original Message-----
> From: owner-ale at ale.org [mailto:owner-ale at ale.org]On Behalf 
> Of Randolph
> C. Karrh
> Sent: Friday, August 03, 2001 6:29 AM
> To: ale at ale.org
> Subject: [ale] password file users shell set /bin/null? 
> 
> 
> Greetings Ale'rs:
> 
> Yesterday, I was supporting a client in Surrency,Georgia (where?) who
> has been hosting on one our competitors machines in California.
> It was a Sun Os webserver with some very interesting settings in their
> password file. Single ftp users were set to the following shell.
> 
> Example:
> plunkett:x:511:511::/home/web/plunkett:/bin/null
> 
> It works whening ftping, but no telnet or ssh.
> 
> I am bewildered, Please explain?
> 
> 
> Randy
> 
> -- 
> Randolph C. Karrh Jr.   "May the world work for you and not 
> against you!"
> 
> Concepts2020.com
> P.O. Box 2124                   office   843.684.3874
> Savannah Ga. 31402              fax      843.784.6232
> 
> --
> To unsubscribe: mail majordomo at ale.org with "unsubscribe ale" 
> in message body.
> 
--
To unsubscribe: mail majordomo at ale.org with "unsubscribe ale" in message body.