[svlug] how to allow a user to ftp but not login?

[Marc MERLIN]

On Wed, Jul 05, 2000 at 08:24:20PM -0700, Daevid Vincent wrote:
> I want to create a user account that can ONLY ftp into my RH6.2 box, but not
> ssh/telnet or anything else.

You can do that with proftpd:

<Anonymous ~ftp>
  #AnonRequirePassword on
  AuthAliasOnly on
  RequireValidShell off
  AuthAliasOnly on
  RequireValidShell off
  User ftp
  Group nogroup

  UserPassword user encryptedpass

  UserAlias user ftp

  MaxClients 20 "Sorry, max %m users -- try again later"

  # Limit WRITE everywhere in the anonymous chroot
  <Directory *>
    <Limit WRITE>
      DenyAll
    </Limit>
  </Directory>

  TransferLog                   /var/log/xferlog.media
  ExtendedLog                   /var/log/xferlog.media.ext      all
</Anonymous>

Marc
-- 
Microsoft is to software what McDonalds is to gourmet cooking
 
Home page: http://marc.merlins.org/ (friendly to non IE browsers)
Finger marc_f at merlins.org for PGP key and other contact information