sftp with no login

ryedunn · 01-04-2007, 11:45 AM

Lets say I have a server with a few virtual domains on one box. I would like to setup sftp so when someone logs in with a particular account they are chrooted within their virtual domain (ie /var/www/domain.com ).

Appears easy enough but I dont want them to be able to log in via ssh. Is this a oxymoron (log in with sftp but not ssh)?

Also, if possible I would like to limit as many of the default files (.font, .local, .kde etc) copied over just to keep things clean in the event there are multiple users for this one domain?

acid_kewpie · 01-04-2007, 12:42 PM

if a given user is *never* going to login to a normal terminal session, then just set their shell to /sbin/nologin or such like.

for what you're using this for though, i'd wonder if you're best served with sftp as opposed to a convention ftp server like vsftpd...

stickman · 01-04-2007, 06:33 PM

Try a shell such as scponly or rssh.

Micro420 · 01-04-2007, 09:27 PM

Quote:

Originally Posted by acid_kewpie

if a given user is *never* going to login to a normal terminal session, then just set their shell to /sbin/nologin or such like.

for what you're using this for though, i'd wonder if you're best served with sftp as opposed to a convention ftp server like vsftpd...

I set the shell for a user to be /sbin/nologin, but now they are unable to use SFTP (in Windows). It just kicks them out immediately.