Sylvain Saboua <[email protected]> writes:

[...]

> $ more /etc/ssh/sshd_config # relevant extracts and changes :
> ...
> PermitRootLogin no
> ...
> # override default of no subsystems
> #Subsystem      sftp    /usr/libexec/sftp-server -d /home/media
> Subsystem       sftp internal-sftp # -d /home/media
>
> Match User media
>         ForceCommand internal-sftp -d /home/media
>         ChrootDirectory /home/media
>         PasswordAuthentication yes
>         AuthenticationMethods none
>         PermitEmptyPasswords yes

Hi,

I have a setup that looks like this (except I'm using pubkey
authentication).  The only other difference I see is that I have not
specified the "-d" option for the internal-sftp command.

It is not clear to me (by manpages) if it should be the same as
ChrootDirectory or a path *under* ChrootDirectory.  Maybe you could try
to remove this "-d" option.
-- 
Manuel Giraud

Reply via email to