[HPADM] Restricted SFTP without user being able to SSH into server.

From: James J. Perry (jjperry@water.com)
Date: Fri Mar 25 2005 - 14:33:56 EST

Next message: Neil Paniraj: "[HPADM] SUMMARY: I/O Time Out: PVDISPLAY Related."
Previous message: Johnson, Craig E: "[HPADM] RE: Snapshop on HP-UX"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

We are migrating to servers where security policy dictates secure ftp
sessions only. In the past we just used restricted FTP with the user's
shell prompt set to /bin/false or /etc/ftponly.

When I do an sftp to that server, I get a message "illegal user XYZ from
ip ..." and the access is denied. When I set the shell to /bin/sh, I
can sftp into the server, but it is not directory restricted to their
home directory. Also, the user can use SSH to login to the server,
which is most undesirable.

I have dug around on man pages, Googled, and looked at OpenSSH.org, but
cannot find out a way to configure the sshd or sftp to make sftp work
like restricted FTP.

Thanks

-Jim

--
             ---> Please post QUESTIONS and SUMMARIES only!! <---
        To subscribe/unsubscribe to this list, contact majordomo@dutchworks.nl
       Name: hpux-admin@dutchworks.nl     Owner: owner-hpux-admin@dutchworks.nl
 
 Archives:  ftp.dutchworks.nl:/pub/digests/hpux-admin       (FTP, browse only)
            http://www.dutchworks.nl/htbin/hpsysadmin   (Web, browse & search)

Next message: Neil Paniraj: "[HPADM] SUMMARY: I/O Time Out: PVDISPLAY Related."
Previous message: Johnson, Craig E: "[HPADM] RE: Snapshop on HP-UX"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 11:02:46 EDT