"Sharing Only" User Account - SSH?

[Cuyahoga]

I was wondering if Leopard's "sharing only" user account class works with SSH ("remote login") instead of just AFP/Samba? I've read all of Apple's docs and they are ambiguous about this fact (though I'd say leaning towards AFP-only).

Thanks for your help!

[macnewbey]

I was wondering if Leopard's "sharing only" user account class works with SSH ("remote login") instead of just AFP/Samba? I've read all of Apple's docs and they are ambiguous about this fact (though I'd say leaning towards AFP-only).

Thanks for your help!

Hi!

See this article:
http://www.macworld.com/article/132002/2008/02/mobilemac2503.html

You can create Sharing Only users in the Accounts preference pane by creating a new account and selecting Sharing Only from the New Account drop-down menu. You can also create a new Sharing Only user from the File Sharing pane by clicking on the plus button under the Users list; by default, that new user will be granted Sharing Only privileges. (Sharing Only users can access remote volumes only via Apple Filing Protocol [AFP], not FTP or Samba.)

So it appears that for now, "Sharing Only" user does not support SMB :mad:

[myjay610]

Did you try it? I have before, but didn't work. I had to make a regular user to SSH in.

[macnewbey]

Did you try it? I have before, but didn't work. I had to make a regular user to SSH in.

I tried Sharing Only user but it didn't work. Finally I had to create a standard user and assign permissions.

So as the article says, Windows to MAC access is possible only through a user account that has login rights (and a Sharing Only user has no login rights).

[clancyhood]

Simply create the user, set to "sharing only", accept the changes, then command-click the user in Accounts preference pane, choose "advanced options", and change "login shell" to "/bin/bash".

Note that the privileges of this user seem fairly widespread - from the terminal at a nearby Ubuntu box I logged in and I tried a few things, and was even able to delete files that belonged to me (me as in GUI me, not to the "sharing only" user) - I was merely prompted "override rw-r-r clancy staff for [file]? y/n".

dseditgroup admin yields myself and root as members, not the new user. Not sure why he's so damn powerful, but perhaps this is why default shell is none!

Clancy