Am Fr, den 26.11.2004 schrieb Ow Mun Heng um 3:25: Have a look at http://www.sublimation.org/scponly/. Probably what you want to allow users to securely access their personal web home while not being able to travel through most of your system. Alexander -- Alexander Dalloz | Enger, Germany | new address - new key: 0xB366A773 legal statement: http://www.uni-x.org/legal.html Fedora GNU/Linux Core 2 (Tettnang) on Athlon kernel 2.6.9-1.6_FC2smp Serendipity 03:41:01 up 5 days, 22:28, load average: 0.56, 0.39, 0.35

it works so that the users have a special login-shell (scponly or scponlyc if chrooted). All the authentication stuff is made by the existing ssh. And yes, it works well with WinSCP. -volker

On Friday 26 November 2004 10:41, Alexander Dalloz wrote: I've incidentally set up ssh just that way on my Drake box I discovered sshd was not installed (oh really!), but entirely coincidently I had an unpacked Sarge filesystem there complete with sshd installed. I chrooted into it and started ssh. You can acutally use any system this wayt - it's a little extravagant in its use of disk space, but if you could countenance a minimal install of FC3 plus ssh in it, it's pretty easy to set it up. You could have the small system unpacked (or mounted) at /websites and the client sites in /websites/home/ Conceivably you could make a compressed ISO using mkzftree and mkisofs and loop-mount it on /websites then mount the client disk space on /websites/home need I mention ISO file systems are read-only? -- Cheers John

Ow Mun Heng wrote: rssh (http://www.pizzashack.org/rssh/index.shtml) allows only scp or sftp access and works very well for me. Cheers, Raman

No, see http://www.pizzashack.org/rssh/faq.shtml#11 Cheers, Raman