[CentOS] vsftpd rejects users set to nologin

Thu Jan 10 21:17:02 UTC 2019
Stephen John Smoogen <smooge at gmail.com>

On Thu, 10 Jan 2019 at 16:09, Kenneth Porter <shiva at sewingwitch.com> wrote:

> I updated to CentOS 7.6 and something must have changed in the base OS
> setup  that prevents vsftpd from allowing logins for accounts with
> /sbin/nologin as their shell. I had to add that to /etc/shells so that
> such
> accounts could FTP again. That file is in the setup package. Did it
> include
> /sbin/nologin before? I don't have anything in my notes from setting up
> the
> system last year about changing that. What's the history of shells listed
> in /etc/shells?
>

So I think this is a side effect of a long term argument of the security
nature of /sbin/nologin

https://serverfault.com/questions/328395/nologin-in-etc-shells-is-dangerous-why
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/UCUWTT63JS72R7ROFE46ZVUZLFN3K2MZ/

The second thread goes over me being an idiot in multiple places...


> _______________________________________________
> CentOS mailing list
> CentOS at centos.org
> https://lists.centos.org/mailman/listinfo/centos
>


-- 
Stephen J Smoogen.