[CLUG-tech] ssh LocalCommand

Jongilanga Guma jongilanga at gmail.com
Mon Mar 12 12:49:26 SAST 2007


Hello Johann,
Not sure this will be a solution, but why are you eliminating them,
just disable them by changing their /etc/password from /bin/bash to
/bin/true, so that the can only ftp.

:-)
Jongi

On 3/12/07, Johann Spies <jspies at sun.ac.za> wrote:
>
> I am trying to limit a user's ssh-access.  As I understand it the
> following configuration in ~/.ssh/config should call "/bin/ls /tmp" just
> after a successful login:
>
>    PermitLocalCommand yes
>    LocalCommand /bin/ls /tmp
>
>
> But it does not happen.
>
> Also I have tried using the format "localcommand"[space]key in
> .ssh/authorized_keys  which, according to my understanding, should have
> the same effect - but that is also not working.
>
> Do you know about any clear documentation and examples on how this
> works?
>
> Regards
> Johann
> --
> Johann Spies          Telefoon: 021-808 4036
> Informasietegnologie, Universiteit van Stellenbosch
>
>      "And now abideth faith, hope, love, these three; but
>       the greatest of these is love."
>                             I Corinthians 13:13
> --
> clug-tech mailing list: clug-tech at clug.org.za
> To (un)subscribe: http://lists.clug.org.za/mailman/listinfo/clug-tech
> Wiki: http://wiki.clug.org.za
> IRC: za.ethereal.web.za #clug
> List Rules: http://wiki.clug.org.za/wiki/Mailing_list_rules
>


More information about the clug-tech mailing list