how to make users login to FTP server but at the same time disable SSH
 

Hi Experts

I installed vsftpd and created new user with /usr/sbin/nologin option, but i am not able to login to FTP server. If i remove nologin option then i can login.

Kindly suggest how to make users login to FTP server but at the same time disable SSH access.

thanks in advance and waiting for your valuable suggestions.

There are lots of different models you might want to apply here really, who are these users? do they relate to the system as a whole? are they customers?

The simple way to strictly achieve what you're asking for is probably to just use the AllowGroups option on the sshd service to restrict who can log into SSH, but maybe the FTP accounts should be kept out of the system account architecture and held in a separate user database, liek ldap?

Setup vsftpd with virtual users, this would create users those can only login to the vsftpd instance and not the system.

EDIT: a good how_to here.