Celebrate National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17


Restricting user to home directory when using SFTP

Posted on 2004-09-10
Medium Priority
Last Modified: 2013-12-27
I have SSH working on server and using WINSCP on XP as a GUI secure ftp utility. Want to be able to set up a login name that cannot be used as a normal login (ie no shell) but want that user to be used for sftp. However, the user should not be able to navigate away from his home directory on the server for file transfers. Server is Solaris 8

Question by:cjshepherd
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
  • 2
  • +1
LVL 18

Expert Comment

ID: 12026975
There is a chroot patch for ssh, but it's not supported by Openssh team, take a look at http://www.google.com/search?q=chroot+sftp
There is also rssh - http://sourceforge.net/projects/rssh/

Author Comment

ID: 12027569
Don't really want to put an unsupported patch on.

Downloaded and compiled rssh. Used that as the ftp users "shell" in /etc/passwd but get a message
"unable to initialise SFTP" when I try to use sftp.

Could not find much documentation on the usage of rssh - am I doing something wrong?
LVL 18

Expert Comment

ID: 12028084
hmm, did this once, but it was a long time ago, looking at the script, I used scp rather than sftp, maybe I couldn't get that to work..?
What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

LVL 38

Expert Comment

ID: 12040693

Author Comment

ID: 12054349
scponly - not on-site at present but tried this last week but got errors when I tried to compileit - found error or line 3 or 5

chroot - loks as if this replaces the OpenSSH which I don't reallt want to do. Also looks as if its all or nothing ie all ssh shels will be restricted

rksh - had already set this up but does not work with sftp
LVL 38

Expert Comment

ID: 12060909
>>>scponly - not on-site at present but tried this last week but got errors when I tried to compileit - found error or line 3 or 5.

Do you have a working C complier installed on your system (eg, GNU gcc  etc), if not
you can download it from:

If you are sure that you C compiler is ok then, you can send an email to scponly
mail-list to see if you can get a patch to fix it.

also have a look at:


Good luck!

Accepted Solution

Computer101 earned 0 total points
ID: 12393296
PAQed - no points refunded (of 125)

E-E Admin

Featured Post

Concerto's Cloud Advisory Services

Want to avoid the missteps to gaining all the benefits of the cloud? Learn more about the different assessment options from our Cloud Advisory team.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Introduction Regular patching is part of a system administrator's tasks. However, many patches require that the system be in single-user mode before they can be installed. A cluster patch in particular can take quite a while to apply if the machine…
Why Shell Scripting? Shell scripting is a powerful method of accessing UNIX systems and it is very flexible. Shell scripts are required when we want to execute a sequence of commands in Unix flavored operating systems. “Shell” is the command line i…
Learn several ways to interact with files and get file information from the bash shell. ls lists the contents of a directory: Using the -a flag displays hidden files: Using the -l flag formats the output in a long list: The file command gives us mor…
Learn how to find files with the shell using the find and locate commands. Use locate to find a needle in a haystack.: With locate, check if the file still exists.: Use find to get the actual location of the file.:

730 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question