Re: sftp server empty password login

2024-03-27 Thread Thomas L.
On Tue, 26 Mar 2024 10:28:11 +0100 Sylvain Saboua wrote: > Match User media > ForceCommand internal-sftp -d /home/media > ChrootDirectory /home/media > PasswordAuthentication yes > AuthenticationMethods none > PermitEmptyPasswords yes you probably

Re: sftp server empty password login

2024-03-26 Thread Darren Tucker
On Tue, 26 Mar 2024 at 23:49, Sylvain Saboua wrote: [...] > /bin/true is not in the /etc/shells file on my system. > Did you suggest I should add it ? I did suggest that as a possible resolution to your problem. Since your problem is now resolved, I wouldn't change it. -- Darren Tucker

Re: sftp server empty password login

2024-03-26 Thread Sylvain Saboua
Problem solved, thank you ! Just removing the password asterisk using vipw was enough : $ grep media /etc/passwd media::2000:2000::/home/media:/sbin/nologin and I am now able to log in, from the local network (still need to open my ISP's box port and confirm that it works remotely) Le

Re: sftp server empty password login

2024-03-26 Thread Manuel Giraud
Sylvain Saboua writes: [...] > $ more /etc/ssh/sshd_config # relevant extracts and changes : > ... > PermitRootLogin no > ... > # override default of no subsystems > #Subsystem sftp/usr/libexec/sftp-server -d /home/media > Subsystem sftp internal-sftp # -d /home/media > > Match

Re: sftp server empty password login

2024-03-26 Thread Darren Tucker
You could run sshd in debug mode to be sure ("/usr/sbin/sshd -ddd -p ", then connect with "sftp -oport="), but... On Tue, 26 Mar 2024 at 22:10, Sylvain Saboua wrote: [...] > # useradd -g media -s /sbin/nologin -u 2000 -v media Unless /sbin/nologin is in /etc/shells (which it probably

sftp server empty password login

2024-03-26 Thread Sylvain Saboua
I have been using the secure shell for remote maintenance on my local machine for some time. I wish to go one step further and implement a secure file transfer server, where user(s) could download files from a read-only /home/media directory as well as upload their own files to /home/media/pub