Server Fault is a question and answer site for system and network administrators. It only takes a minute to sign up.
Sign up to join this community
How can I disable login for a user on OS X but still allow them to scp files to/from that machine?
I've come across a shell replacement "scponly" but that doesn't compile for OS X (and is really old), I've also tried changing the users shell to /sbin/nologin and /usr/bin/false, both successfully prevent logins, but they also prevent scp's...
Any hints?
Cheers
Openssh does not have this functionality. As it provides the means for sftp, scp, and ssh, in an, all or nothing fashion.
rssh could be your solution then.
rssh is a restricted shell for use with OpenSSH, allowing only scp and/or sftp. It now also includes support for rdist, rsync, and cvs
It seems this is not possible without basically making a chroot environment. (Which ftp servers do, as do these shells).
Have you thought of using FTPS? (vsftpd requires little configuration and provides a jail for the users. Setup Guide Here)
