You might try just setting their shells to /bin/false or something taht
just immediately quits and logs them back out.
-steve
> We have installed ssh 1.2.22 on all machines in our cluster and want to
> install it on our fileserver, too. At the moment users are not allowed
> to login on this fileserver but use ftp there to transfer data. Is there
> a chance to tell the sshd daemon just to allow scp requests from normal
> users but no ssh? Only privileged users (adminstrator) should be allow
> to use ssh to this machine. Otherwise we would open up this machine for
> interactive use just to get a more secure system We have looked in the
> sshd configuration file but there seems to be no parameter useful to us.
> The "X11Forwarding" parameter might help us to prevent X-login but users
> still can send commands directly to be executed on this machine. Does
> anybody know how we could realize allowing scp but no ssh connect to the
> sshd daemon for normal users?
>
> Monika Ollech
