No shell access for user through telnet?

[Erkan Tanribilir]

OS: Tru64 5.1B (2650)
I don't know if the subject really reflects my purpose but below is what I intend to do...

Is it possible to give access to users through telnet without allowing shell access?

In other words, they will login to system but they will not be able to run any commands, even ls command on terminal screen...

Thanks in advance,
CET

[Steven Schweda]

I believe that your question makes no sense,
but I'm open to a good counter-argument.

> [...] they will login to system but they
> will not be able to run any commands, [...]

And what, exactly, _will_ they be able to do?

Will these users ever access the system in
any other way (FTP, local terminal, ...)?

[Dennis Handly]

Did you want them to login directly to a script? I.e. change your login shell to the name of the script?

[John Manger · Accepted solution]

As Dennis said, alter the login shell field of that user's entry in the /etc/passwd file, and make it a non-shell program. Then ensure that the chosen program cannot or does not allow starting a sub-shell or exiting into a shell. This a commonly used solution to the scenario you describe, for example to allow users into an application or a menu of applications, but not into a shell login.

John M

[Erkan Tanribilir]

I know that it sounds strange but we have this software which uses telnet connection at the background. We want to restrict access to server with a use of a telnet client for specific users. But as you all mentioned we have to solve this out in house buy modifying the users profile/login files.

Anyhow thanks everyone for their response.

CET

[Steven Schweda]

> But as you all mentioned [...]

I don't see where _anyone_ mentioned that.

> Anyhow [...]

If you ever explained what you're actually
trying to do, then you might get some more
helpful responses. Some people will try to
guess what you need, but with no useful
information to work with, their chances for
success are often not very good.