[ale] Best way to disable command-line access?

Michael Still stillwaxin at gmail.com
Thu Oct 5 16:21:38 EDT 2006


I think placing something like /sbin/nologin in /etc/shells and then
assigning that as the user shell then sftp will still work but they
won't be able to login interactively.

On 10/5/06, Allan Metts <ametts2 at mindspring.com> wrote:
> Hi everyone,
>
> What's the best way to preserve the ability to transfer files with scp, but PREVENT someone from using those same ssh credentials to get to a command line?  This is for a single user only -- other users of the same server should be able to log in as usual.
>
> I tried usermod -s <a_script_that_does_nothing> <user>, but this seems to prevent scp file transfers as well.
>
> Is there a user-specific ssh config setting that does this?  Any other ideas?
>
> Thanks in advance,
> Allan
>
>
> _______________________________________________
> Ale mailing list
> Ale at ale.org
> http://www.ale.org/mailman/listinfo/ale
>


-- 
[stillwaxin at gmail.com ~]$ cat .signature
cat: .signature: No such file or directory
[stillwaxin at gmail.com ~]$



More information about the Ale mailing list