Using scponly To Allow SCP/SFTP Logins And Disable SSH Login
HowToForge has a nice HowTo online, on setting up scponly on a Debian system.
From my experience with scponly and Windows systems as a client (WinSCP), I would like to add:
You do not only need the
cp /lib/libnss_* -av /home/someuser/lib/
to fix the
Command ‘groups’ failed with return code 1 error, but also
cp -a /dev/null /home/someuser/dev/
At least on Debian Lenny.