UNIX for Dummies Questions & Answers

Others may wish to comment further.
I believe that directory permissions 600 would need to be 700 for login to work.
Is group 444 "other" ?

Have you tried running "pwck" (password file checker) ?

Changing to 700 worked. Thanks.

One other thing I noticed though is that if I login through telnet or SSH with this new user, I cannot change directory or list whats in the directory: restrictions imposed by the restricted shell I guess. BUT, if I login in through an FTP client, I am able to change directory and navigate upwards. Why is this? Does the shell govern this?

thanks

Anyone?

Code:

ant:/home/vbe $ rsh
ant:/home/vbe $ cd ..
rsh: cd: The operation is not allowed in a restricted shell.

Happy?

Another thing, look an the man pages on perms... You remove execute on a directory means it becomes impossible to traverse and so of no use...( I have some crasy users doing that sort of stuff to protect directories from others... the fun is sometimes they change the ownership...)

Actually, I dont think I made myself clear... sorry. I don't want this user to be able to navigate out of their home directory - whether they are logged in using FTP, telnet, SSH, etc...

For some reason, they can navigate when using an FTP client though. This I don't want and I dont understand why this is possible. Commands from an FTP client are the same as from that of telnet or SSH; only on a different port, correct?

Thanks

I don't mess with users to much so I created the following script, keep in mind it creates a zfs filesystem for each new user so you may want to edit to suit your needs, hope this helps someone.

#!/bin/ksh

case $1 in

'useradd')

print "User Name? \c"
read user
print "User ID? \c"
read User_ID

zfs create tank/$user
zfs set mountpoint=legacy tank/$user
mkdir /export/$user
cp /etc/vfstab /etc/vfstab.bak
print "tank/$user - /export/$user zfs - yes -" >> /etc/vfstab
mount /export/$user

useradd -g 1000 -u "$User_ID" -d /export/"$user" -s /bin/ksh $user
passwd -fd $user
;;
esac

make some changes to this row:

useradd -g 1000 -u "$User_ID" -d /export/"$user" -s /bin/ksh $user

to

useradd -g 1000 -u "$User_ID" -d /export/"$user" -m -s /bin/ksh $user