creating a user with no shell

fredanthony · 07-17-2006, 07:58 PM

Hi, I am trying to setup ftp and system users with no shell access. I have already added a shell /etc/ftponly in /etc/shells. /etc/ftponly is a file containing:

Quote:

#!/bin/sh
#
# ftponly shell
#
trap "/bin/echo Sorry; exit 0" 1 2 3 4 5 6 7 10 15
#
Admin=root@your-domain.com
#System=`/usr/ucb/hostname`@`/usr/bin/domainname`
#
/bin/echo
/bin/echo "********************************************************************"
/bin/echo " You are NOT allowed interactive access."
/bin/echo
/bin/echo " User accounts are restricted to ftp and web access."
/bin/echo
/bin/echo " Direct questions concerning this policy to $Admin."
/bin/echo "********************************************************************"
/bin/echo
#
# C'ya
#
exit 0

What I want to do now is creat users with the ftponly shell and home directories in /home/<username>. I tried useradd -s /etc/ftponly -d /home/<username> -m <username>. Which creates the home directory in the correct place but when I do an ls -al I get:

Quote:

drwxr-xr-x 2 schnap users 4096 2006-07-17 20:43 .
drwxr-xr-x 6 root root 4096 2006-07-17 20:35 ..
-rw-r--r-- 1 schnap users 220 2006-07-17 20:35 .bash_logout
-rw-r--r-- 1 schnap users 414 2006-07-17 20:35 .bash_profile
-rw-r--r-- 1 schnap users 2227 2006-07-17 20:35 .bashrc

So I also see these in FTP. How can I create the user and user dir without these files? Thanks.

fredanthony · 07-17-2006, 08:45 PM

just bumpin it up

ugenn · 07-17-2006, 08:47 PM

Don't use the -m and -d options. And set -s to /bin/false. See man useradd for details.

osor · 07-17-2006, 08:49 PM

man nologin

jschiwal · 07-17-2006, 08:55 PM

I'm not certain what you are trying to accomplish. Do these users need their own home directories?

Read through the addusers man-page. There is an option to use a different skeleton directory to supply the skeleton files for new users. You could use the "-k skeldir" option, and have your ftp skeleton directory be empty. Then nothing will be copied to new user's home directories.

Here is a link to a nixCraft article. The use a similar script called nologin, and have it listed in /etc/shells. This is very similar to how you are doing it:
http://www.cyberciti.biz/nixcraft/vi...ing-access.php

fredanthony · 07-17-2006, 08:59 PM

Quote:

Originally Posted by ugenn

Don't use the -m and -d options. And set -s to /bin/false. See man useradd for details.

If I don't use the -m it won't create the users home dir in /home/<username>. I need this for ftp..

I need it so that the user I add has a home dir in /home/<username> and they must not have shell access only ftp and web.

fredanthony · 07-18-2006, 08:10 AM

anyone? Thanks.

fredanthony · 07-18-2006, 08:51 AM

Ok, what I did is:

Quote:

mv /etc/skel /etc/skel_old

then just created the user with:

Quote:

useradd -d /home/<user> -m -s /etc/ftponly

osor · 07-18-2006, 09:28 AM

You can make the shell `/sbin/nologin' which will politely refuse interactive login sessions. So the easiest way to run the ftp daemon would be as SUID ftp.