We want to restrict users to only be able to use SFTP and not SSH. When we set a user to use the /usr/bin/scponly shell, they are not able to SFTP in. We see the following error in the secure log:
User username not allowed because shell /usr/bin/scponly is not executable
Is there a way to correct this so users can connect via SFTP but not obtain a shell via SSH?