Instead of giving a ftp user a valid shell, how about using /bin/false ?

Would be safer.

for do it please insert into proftpd.conf
RequireValidShell off

Well, I think this is not needed.
/bin/false is a valid shell (in etch and also some other *nix os)

Since the values in the database are only questioned by the ftp daemon it makes no big difference - but to be on thes safe side, /bin/false should be absolutely enough...

someone should test this. And verify that bin/false is a valid one.

Ok, I checked it.
I was wrong... :-( (in SuSE "/bin/false" was already a valid shell)

ok, two possibilities:
- "RequireValidShell off" in proftpd.conf
or
- "/bin/false" in /etc/shells

With this, you can set /bin/fals into the table ispcp.ftp_users...
both testet with etch.

/Joximu