This is the mail archive of the
mailing list for the Cygwin project.
Re: OpenSSH and cygwin: let a user only connect via sftp.
- From: Corinna Vinschen <corinna-cygwin at cygwin dot com>
- To: "'cygwin at cygwin dot com'" <cygwin at cygwin dot com>
- Date: Mon, 9 Dec 2002 10:57:47 +0100
- Subject: Re: OpenSSH and cygwin: let a user only connect via sftp.
- References: <ED5638825509D4118F9D000102054B1C02226534@EXSRV-NES>
- Reply-to: cygwin at cygwin dot com
On Thu, Dec 05, 2002 at 12:45:28PM +0100, Schonder, Matthias wrote:
> >Setting a user's shell to /bin/false might (and I repeat, *might* - this is
> >speculation) work.
> Nope, this does not work :( Been there, done that. But when sftp tries to
> login connection will be closed immediately.
> But thanks for you help.
> >PS: This isn't really Cygwin specific.
> Well, I would say it is, because in FreeBSD and IRIX it works fine... so....
Well, if it works on FreeBSD and IRIX then do it the same way in Cygwin
as you did on FreeBSD and IRIX. For instance, I tried setting the login
shell on a linux box to /bin/false and guess what? The connection is
closed immediately. So in that example Cygwin's ssh works exactly as on
What you missed somehow is to explain *how* it works on FreeBSD and IRIX
so that we have a chance to look if (and perhaps why) it doesn't work on
Cygwin using the same technique which would make it sort of a Cygwin
OTOH, I know how to restrict a user to sftp only and I know that the same
technique works on Cygwin as well as on e. g. Linux so from my current
knowledge of the situation there isn't something Cygwin specific here...
Corinna Vinschen Please, send mails regarding Cygwin to
Cygwin Developer mailto:email@example.com
Red Hat, Inc.
Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple
Bug reporting: http://cygwin.com/bugs.html