user without console access

saavik · 03-11-2002, 03:53 AM

Hello!
Can i create a use with can use samba
but can not log into a shell?
if yes, how?

CU

nitr0gen · 03-11-2002, 02:13 PM

this is a little tweak
create a shellscript /bin/nologin
give execute rights
chmod a+x /bin/nologin
write that into it:
!#/bin/sh
echo "Restricted acces get lost"

Append the shell name into /etc/shells
...
/bin/sh
/bin/nologin
...

then create the user and specify his shell /bin/login
next time the user will try to log on... He will see "Restricted access get lost"

happy tweaking
nitr0gen

thecrab · 03-11-2002, 02:48 PM

I did that for my ftp user...
So now they can login on the ftp, but can't with a shell.
I had a /dev/null shell.

1. useradd -d /var/ftp/myuser/ -s /dev/null myuser > /dev/null 2>&1

2. created directory in /var/ftp/myuser

3.edited /etc/shells file to include /dev/null

4.edited /etc/passwd to read:myuser:x:502:502::/var/ftp/./myuser/:/dev/null

saavik · 03-13-2002, 10:18 AM

seems a bit complicated to me!
is ther no easy way?
just delete the shel definition in the passwd!
is that working?

Mik · 03-14-2002, 07:25 AM

Just removing it will work for most programs but some complain about it.
The easiest way would be to either change the shell to /dev/null or /bin/false and then also add that entry to /etc/shells.
But that's exactly what the other two people suggested.