does anyone have an idea how to create an account that can ONLY be used for ftp upload, but NOT for ssh or telnet ?

in netinfo manager, assigning /sbin/nologin to the user's "shell" property will disallow ssh/telnet in a polite way.

$ /sbin/nologin
This account is currently not available.

Are there any guides out there on what things you can put in what keywords for netinfo in OS X? For example, I have tried to figure out if there is a way in a "printer" entry to specify a particular PPD file for a printer, but not only can't I find any info on that, I can't find much info on anything. Apple has a netinfo document, but it is of little help as it seems to be OS X Server specific, and even then still seems incomplete. What's with the mystery? All such netinfo-info seems to be passed on by word of mouth, which is indeed how I learned of removing the "real name" to hide a user at the login screen.