Re: sFTP compared with FTP via VPN

From: Jim Hatfield (jim.hatfield_at_insignia.com)
Date: 04/28/04

  • Next message: Bill Unruh: "Re: Feeding /dev/random with /dev/urandom"
    Date: Wed, 28 Apr 2004 18:32:33 +0100
    
    

    On Tue, 27 Apr 2004 20:43:48 +0200, mgrd <mgrd@gmx.net> wrote:

    >For an FTP only account it's sufficient to put `/sbin/nologin' in their
    >passwd file

    Not on all operating systems. From the man page for ftpd on FreeBSD:

    > The ftpd utility authenticates users according to six rules.
    >
    > 1. The login name must be in the password data base and not have
    > a null password.
    >
    > 2. The login name must not appear in the file /etc/ftpusers.
    >
    > 3. The login name must not be a member of a group specified in
    > the file /etc/ftpusers. Entries in this file interpreted as
    > group names are prefixed by an "at" `@' sign.
    >
    > 4. The user must have a standard shell returned by
    > getusershell(3).

    getusershell(3) looks in /etc/shells. As installed, this looks
    like:

    >/bin/sh
    >/bin/csh
    >/bin/tcsh

    though it's trivial to add /sbin/nologin to it.

    jim

    -- 
    Jim Hatfield
    

  • Next message: Bill Unruh: "Re: Feeding /dev/random with /dev/urandom"

    Relevant Pages

    • Re: FreeBSD and MPD PPTP VPN headache
      ... >Because PoPToP doesn't support encryption with FreeBSD either. ... >be in the same boat. ... Jim Hatfield ...
      (comp.unix.bsd.freebsd.misc)
    • Re: Review of fanless FreeBSD server
      ... >for use with FreeBSD, ... if you wanted two network connections why didn't ... you go for a CL board which has two built in? ... Jim Hatfield ...
      (comp.unix.bsd.freebsd.misc)