I'm looking for a way to make a directory on a linux system available for reading to other linux and windows clients. The share must require some authentication from the client and the passwords and files must be sent encrypted.
The clients should only be able to access the shared directory by some protocol, but NOT be able to log in via ssh. If I'm not mistaken that rules out sftp, scp and samba.
Is there a way to achieve this by some other file sharing technique or settings or do I need to have a linux user that can also do ssh login?
If I need a user who can ssh, I have found
but would prefer not to have the user at all, or block it from logging in.