Author Topic: banning users  (Read 894 times)

Paladin9

  • VIP
  • Member
  • ***
  • Posts: 696
  • Kudos: 263
banning users
« on: 7 March 2004, 02:08 »
how do I prevent users from actually being able to login in to slackware?  I want the users to be able to access stuff over the network, but I do not want them login into the slackware server itself. Another question; I know how to "jail" users to their home directory in proftpd, but how do I jail only some users and not all of them?
_________________________________________________
 
To create a new standard, it takes something that's not just a little bit different; it takes something that's really new and really captures people's imagination

mobrien_12

  • VIP
  • Member
  • ***
  • Posts: 2,138
  • Kudos: 711
    • http://www.geocities.com/mobrien_12
banning users
« Reply #1 on: 7 March 2004, 02:27 »
To give a user access to everything but a shell prompt, edit the /etc/passwd file and replace their shell (e.g. /bin/bash) with /sbin/nologin.  

Not sure about the proftpd jailing question.. I stopped using any form of FTPD years ago.
In brightest day, in darkest night, no evil shall escape my sight....

KernelPanic

  • VIP
  • Member
  • ***
  • Posts: 1,878
  • Kudos: 222
banning users
« Reply #2 on: 7 March 2004, 03:13 »
Slackware doesn't actually have an /sbin/nologin, but you can copy it from RedHat.
Contains scenes of mild peril.

Paladin9

  • VIP
  • Member
  • ***
  • Posts: 696
  • Kudos: 263
banning users
« Reply #3 on: 7 March 2004, 04:48 »
quote:
Originally posted by Tux:
Slackware doesn't actually have an /sbin/nologin, but you can copy it from RedHat.


I tried that in slackware and it worked, however it prevented those users from logging in to proftpd.
_________________________________________________
 
To create a new standard, it takes something that's not just a little bit different; it takes something that's really new and really captures people's imagination

Kintaro

  • Member
  • **
  • Posts: 6,545
  • Kudos: 255
  • I want to get the band back together!
    • JohnTate.org
banning users
« Reply #4 on: 7 March 2004, 07:42 »
You could probably put symlinks in the home directorys to the other stuff you want them to accses.

eg, if you wanted user "jesus" to accses /bible.

ln -s /home/jesus/bible /bible

or somthing like that.

Kintaro

  • Member
  • **
  • Posts: 6,545
  • Kudos: 255
  • I want to get the band back together!
    • JohnTate.org
banning users
« Reply #5 on: 7 March 2004, 07:58 »
1 vote for bin