On Fri, 2003-01-31 at 02:41, J.P. Pasnak wrote: > > On January 30, 2003 06:25 am, Mark wrote: > >> Hello There, > >> > >> OpenSSH does do what you want via using a package called "scponly" > >> I have been using this package for some time.. it's excellent.. > >> > >> Have a look at http://www.sublimation.org/scponly/ > >> > >> Cheers > >> Mark > >> > >> On Thu, 2003-01-30 at 06:24, J.P. Pasnak wrote: > >> > I've been attempting to set up an enviroment that will let a user > >> > use sftp, but not allow them to 'walk' the rest of the system. > > > > Sweet. Thanks alot. > > OK, scponly works as advertised, but it still doesn't work when attempting > to 'chroot' the user to a single directory. I believe that this may be a > pam problem. > > Can you provide any tips on how you set it up, or point me at some > documentation?
First up don't use any of the pre-made binaries, as you need to download the source, then unpack the source, change to the directory where you unpacked the source and read the file "INSTALL" as that has your chrooted instructions in it, and run the command "configure --enable-chrooted-binary" then "make" etc etc.. then "make jail" >From that you will be able to add a chrooted user.. After you know what is going on, you can write your own script to make existing users "scponly chrooted", as that is about the only thing that the program is missing.. other than that the program is a fabulous solution, with support for winSCP http://winscp.vse.cz/eng/ and gftp http://gftp.seul.org/ Cheers Mark
Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
