Want to highlight a helpful answer? Upvote!

Did someone help you, or did an answer or User Tip resolve your issue? Upvote by selecting the upvote arrow. Your feedback helps others! Learn more about when to upvote >

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

User profile for user: macmartin
macmartin Author
User level: Level 3
507 points

Set up user for ftp only

Hello together,


I want to set up a user who can only use ftp.


I already tried to add a user with dscl:


AppleMetaNodeLocation: /Local/Default

AuthenticationAuthority: ;Kerberosv5;;scanner@LKDC:SHA1.89A0693B6B330B6432D695445AAA8E38FE88DF93;LKDC:SH A1.89A0693B6B330B6432D695445AAA8E38FE88DF93 ;ShadowHash;HASHLIST:<SALTED-SHA512,SMB-NT,CRAM-MD5,RECOVERABLE>

GeneratedUID: 7BFB0F8A-82A0-4E07-BB99-BFD45ADC2F76

NFSHomeDirectory:

/Shared Items/90_Scans

Password: ********

PasswordPolicyOptions:

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>failedLoginCount</key>

<integer>0</integer>

<key>failedLoginTimestamp</key>

<date>2001-01-01T00:00:00Z</date>

<key>lastLoginTimestamp</key>

<date>2001-01-01T00:00:00Z</date>

<key>passwordTimestamp</key>

<date>2013-02-01T13:11:52Z</date>

</dict>

</plist>

PrimaryGroupID: 20

RealName: Scanner

RecordName: scanner

RecordType: dsRecTypeStandard:Users

UniqueID: 999

UserShell: /bin/false


But when I try to login via ftp I get:


Connected to bigmac.mydomain.com

220 192.168.1.2 FTP server (tnftpd 20100324+GSSAPI) ready.

331 User scanner accepted, provide password.

Password:

530 User scanner may not use FTP.

ftp: Login failed


What am I doing wrong?


Thanks in advance

macmartin

Posted on Feb 1, 2013 5:33 AM

Reply
Question marked as Best reply
User profile for user: Camelot
Camelot
User level: Level 9
54,339 points

Posted on Feb 1, 2013 9:59 AM

For the raw answer:


cat /etc/shells


and note the comments at the top of the file, notably:


# List of acceptable shells for chpass(1).

# Ftpd will not allow users to connect who are not using

# one of these shells.


Since you set your UserShell to /bin/false, and /bin/false is not listed as a valid shell in /etc/shells, your user cannot log in to the server.


Typical OSes include a dummy shell, typically /bin/ftponly or /sbin/nologin which you can use for such accounts, but you'll still need to add them to /etc/shells if they're not listed there.

View in context
2 replies
Question marked as Best reply
User profile for user: Camelot
Camelot
User level: Level 9
54,339 points

Feb 1, 2013 9:59 AM in response to macmartin

For the raw answer:


cat /etc/shells


and note the comments at the top of the file, notably:


# List of acceptable shells for chpass(1).

# Ftpd will not allow users to connect who are not using

# one of these shells.


Since you set your UserShell to /bin/false, and /bin/false is not listed as a valid shell in /etc/shells, your user cannot log in to the server.


Typical OSes include a dummy shell, typically /bin/ftponly or /sbin/nologin which you can use for such accounts, but you'll still need to add them to /etc/shells if they're not listed there.

Reply

Set up user for ftp only

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.
Learn more Sign up