> Are there reasons this won't work? (I plan to try it so feedback is > welcome) You may want to write a script to test if the users have the same password for their FTP account and shell account, and if so, disable the shell.