Go Premium for a chance to win a PS4. Enter to Win

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1560
  • Last Modified:

Restricting user to home directory when using SFTP

I have SSH working on server and using WINSCP on XP as a GUI secure ftp utility. Want to be able to set up a login name that cannot be used as a normal login (ie no shell) but want that user to be used for sftp. However, the user should not be able to navigate away from his home directory on the server for file transfers. Server is Solaris 8

Thanks
0
cjshepherd
Asked:
cjshepherd
  • 2
  • 2
  • 2
  • +1
1 Solution
 
liddlerCommented:
There is a chroot patch for ssh, but it's not supported by Openssh team, take a look at http://www.google.com/search?q=chroot+sftp
There is also rssh - http://sourceforge.net/projects/rssh/
0
 
cjshepherdAuthor Commented:
Don't really want to put an unsupported patch on.

Downloaded and compiled rssh. Used that as the ftp users "shell" in /etc/passwd but get a message
"unable to initialise SFTP" when I try to use sftp.

Could not find much documentation on the usage of rssh - am I doing something wrong?
0
 
liddlerCommented:
hmm, did this once, but it was a long time ago, looking at the script, I used scp rather than sftp, maybe I couldn't get that to work..?
0
VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

 
yuzhCommented:
0
 
cjshepherdAuthor Commented:
scponly - not on-site at present but tried this last week but got errors when I tried to compileit - found error or line 3 or 5

chroot - loks as if this replaces the OpenSSH which I don't reallt want to do. Also looks as if its all or nothing ie all ssh shels will be restricted

rksh - had already set this up but does not work with sftp
0
 
yuzhCommented:
>>>scponly - not on-site at present but tried this last week but got errors when I tried to compileit - found error or line 3 or 5.

Do you have a working C complier installed on your system (eg, GNU gcc  etc), if not
you can download it from:
http://sunfreeware.com/

If you are sure that you C compiler is ok then, you can send an email to scponly
mail-list to see if you can get a patch to fix it.

also have a look at:

https://lists.ccs.neu.edu/pipermail/scponly/2002-November/000160.html

Good luck!
0
 
Computer101Commented:
PAQed - no points refunded (of 125)

Computer101
E-E Admin
0

Featured Post

Concerto Cloud for Software Providers & ISVs

Can Concerto Cloud Services help you focus on evolving your application offerings, while delivering the best cloud experience to your customers? From DevOps to revenue models and customer support, the answer is yes!

Learn how Concerto can help you.

  • 2
  • 2
  • 2
  • +1
Tackle projects and never again get stuck behind a technical roadblock.
Join Now