On second thought, maybe I should just use the alternative -- set the user's shell to /sbin/nologin like all the other nologin accounts, which will force them to use a regular FTP connection. Just tried this and it does hte trick as long as I am willing to live without secure FTP (which is probably OK for the site in question). -- Tom