I'm needing to setup a basic web user account on my ubuntu 10.10 server to host web pages. This account should be limited to access only the necessary directories on the machine. I setup the following account but nothing happens when I try to log into it:
:~$ groupadd -g 1005 webgroup //I then changed the group and permissions of a current user I had already created :~$ sudo usermod -g 1005 -s /bin/false -d /home/webuser/ webuser
When trying to login using this account I enter the username [webuser] and the password but it just redirects me back to the login: prompt. I tried resetting the password but still have the same problem.
Can someone either tell me what I'm doing wrong, or suggest another method that would achieve the same result (if not a better one).
It sounds like I do not want the user to be able to login at all. However, (my grasp on this concept is apparently very small so bear with me) doesn't the user have to be logged in for web requests to be received by that user? In other words, web requests are received and interpreted by the user who is logged in at that time (correct?). If this is a continuously running server and is always turned on in our server room, then shouldn't the logged in user be my 'webuser' I just created in order to limit access to individuals trying to hack in?