I've gotta' Redhat 7.3 server setup with CVS and working fine.

If a registered user wants to use CVS, all's fine and CVS is good.

If a registered user wants to SSH into their home directory, it's good also.

What I want to do is eliminate the ability of the user to shell into their home directory yet still be able to use CVS.

I've tried changing the passwd file to :/sbin/nologin which knocks out the remote ssh shell in but this stops a user from using CVS since password is necessary to commit CVS file updates.

Seems like this is a vicious circle, I cannot do without one or the other.

A question : can I allow a user on the server only if they are using CVS but not when they ssh in?

Thanks ahead!

I don't know how nologin works really, but I have had success in similar scenarios - FTP access but no shell - setting the user's shell to /bin/false and setting RequireValidShell in proftpd.conf to "no". CVS must have similar options I believe, or perhaps it just works as is...? It's certainly worth a try.


Håkan

you can specify a group to access cvs or do a chmod on it.