Disable Shell Accounts!

[utter_macabre]

How do I disable a shell account for a particular user without disabling the ftp account?

[Stackrat]

edit /etc/passwd

Change the /bin/bash to /bin/false for each user for whom you wish to disable shell access for.

[utter_macabre]

Ok, I tried that and now it won't allow ftp logins for that user anymore, remember I only want to disable shell access, not FTP. =(

[Stackrat]

Sorry, I guess I was talking out of turn. I was responding to a few threads and thought I was on a roll, until you ruined it for me. http://www.linuxnewbie.org/ubb/wink.gif

I actually don't run FTP, but I didn't think bash had anything to do with FTP. That's interesting, though.

[This message has been edited by Stackrat (edited 16 November 2000).]

[utter_macabre]

Yes, it's a pretty tricky one. I run SSH for remote login only, and I run ProFTPD instead of Wu-FTPD. I've got my user accounts all set up just how I want them for ftp, but I still get a jackass trying to ssh into my box and poke around and I just want him to stop it. Oh well, maybe somebody will figure this one out. =(

[utter_macabre]

PLEASE, SOMEBODY! ANYBODY? HELP!@#$%^&*


,¸_¸,ø¤°`°¤ø,¸-=-XxMaCaBrExX-=-¸,ø¤°`°¤ø,¸_¸,

[Stackrat]

Block his IP address

[speck]

Change his shell from /bin/bash to /bin/false.

Speck

[utter_macabre]

Originally posted by speck:
Change his shell from /bin/bash to /bin/false.

Speck

Didn't bother to read the first half of the post, did you?

[utter_macabre]

Well, I guess my question now becomes, "How do I block his ip-address?" Oh wait , let me guess... IPCHAINS! Well, I suck at ipchains, sodoes anybody out there not suck at ipchains? http://www.linuxnewbie.org/ubb/biggrin.gif

[Paul Weaver]

/ets/hosts.deny maybe?

Or write a trojan horse shell or something for him, so when he tries to do something it rm -Rf's him

[utter_macabre]

Uhh, sure. Sounds Easy! *cough* *cough*
Uhh, no seriously though. http://www.linuxnewbie.org/ubb/confused.gif

[bytemare]

Add /bin/false to /etc/shells

[utter_macabre]

It's already there. http://www.linuxnewbie.org/ubb/frown.gif

[bytemare]

bummer http://www.linuxnewbie.org/ubb/frown.gif
you must have another problem...

setting their shell to /bin/false and then adding that to /etc/shells is how to do it.

hmm you could try creating and empty file /bin/false if it's not already there...

[John_Doh]

Try changing shell to something else, like /bin/noshell and add that to /etc/shells

[BobjoB]

add
in.ftpd: <users ip>
to hosts.allow
and hosts.deny
in.telnetd: <users ip>
or use a better ftpd like ncftp or pro or gl