Re: vsftp question

> 
> The recent discussion on Apache+ftp+php etc prompted me to ask a
> related question.  I have a similar setup with "student" accounts each
> with a homedir containing a public_html directory.  Each user has a
> valid entry in the passwd file and are each chrooted to their home dir
> by VSFTP.  However, I don't want them to gain terminal access at all.
> Under wu-ftp there was no problem.  You just give them /bin/false or
> /bin/nologin as their login  shell in the passwd file.  However if you
> do this with vsftp, it prevents them from ftp-ing into their home
> also.  How do I grant FTP but not shell access?
> 

You can use /sbin/nologin for chrooted vsftp users
        # cat /etc/passwd | grep user
	user:x:501:501::/home/domain/user:/sbin/nologin
	# cat /etc/vsftpd/vsftpd.conf
	chroot_list_enable=YES
	chroot_list_file=/etc/vsftpd.chroot_list
	# cat /etc/vsftpd.chroot_list 
        user

-- 
                                                    Eduardo Tongson     
                                                    <pornadmin.net/~tongson>