SSH 限制登入

mantec

有台LIUNX服务器,需要开放SFTP与外界进行数据交换,我想某个帐号只限制与SFTP的命令,而不想让其SSH登入,不知道如何实现????

只爱睡觉

usermod -s /sbin/nologin username

mantec

usermod -s /sbin/nologin username

好象SCP也不可以使用了，有没有别的办法

jayliud

LZ的意思要配置/etc/hosts.deny，/etc/ssh/sshd_config?

bingosek

tcp wrapper不能对用户进行限制

可可火山

How to restrict users to SFTP only instead of SSH

Posted by hruske on Sun 13 Feb 2005 at 21:52
Tags: sftp, ssh

Sometimes you want to have users, that have access to files on your server, but don't want them to be able to log in and execute commands on your server.

This is done quite easily.

Add user as usually and assign him a password. Then run the following command (replace the 'username' with real user name):
root@host # usermod -s /usr/lib/sftp-server username

This changes user's shell to sftp-server.

The last step for this to work is to add '/usr/lib/sftp-server' to /etc/shells to make it a valid shell, eg. like this:
root@host # echo '/usr/lib/stfp-server' >> /etc/shells

There. Now you've setup a user who can only access your server with SFTP.

我自己改user默认shell就可以工作了，sftp-server的位置查看sshd_config就可以了
[user@~ (0)]$ finger sftponly
Login: sftponly                         Name: (null)
Directory: /home/sftponly               Shell: /usr/libexec/openssh/sftp-server
Never logged in.
No mail.
No Plan.