Only SCP/SFTP without SSH & lock user in home directory

[poldas]

Hi

Is it possible to block login via SSH but allow SCP/SFTP and lock user in home directory?

 

[dlavigne]

Use scponly: http://doc.freenas.org/9.10/account.html#users.

 

[poldas]

Thanks scponly this is it!

But still I don't know how to lock user in home directory...

 

[dlavigne]

So, that is a compile option which is off by default in FreeBSD: http://www.freshports.org/shells/scponly/. You could create a feature request at bugs.freenas.org asking that it be enabled. If you do, post the issue number here.

 

[poldas]

maybe I can change something in sshd.conf via Extra options in SSH configuration in the web GUI