Re: vsftp question

On Fri, Apr 01, 2005 at 11:41:28PM -0400, Marcus Merrin wrote:
> The recent discussion on Apache+ftp+php etc prompted me to ask a
> related question.  I have a similar setup with "student" accounts each
> with a homedir containing a public_html directory.  Each user has a
> valid entry in the passwd file and are each chrooted to their home dir
> by VSFTP.  However, I don't want them to gain terminal access at all.
> Under wu-ftp there was no problem.  You just give them /bin/false or
> /bin/nologin as their login  shell in the passwd file.  However if you
> do this with vsftp, it prevents them from ftp-ing into their home
> also.  How do I grant FTP but not shell access?
>
> Marcus

See vsftpd.conf(5), under 'check_shell'; if you have a PAM-enabled
vsftpd, see /etc/pam.d/vsftpd or something similar.

(Run ldd /usr/sbin/vsftpd to check whether or not your vsftpd is
PAM-enabled; if there is a libpam.so (.something, possibly), it is.)

                Joachim