Re: Restricted SFTP access to server for one user

2006-03-28 Thread Ashley Moran
On Tuesday 28 March 2006 10:36, Martin Hudec wrote:
> I think that shells/scponly should have chroot ability for their users.

I'm sorted now - got rssh working after following a guide by John Delgado I 
found by googling.

Cheers Ashley
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Restricted SFTP access to server for one user

2006-03-28 Thread Ashley Moran
On Tuesday 28 March 2006 10:36, Martin Hudec wrote:
> Hello Ashley,
>
> Ashley Moran wrote:
> > I don't want to install an FTP program, and we
> > don't use password authentication for SSH, so I'm going to tell him to
> > create a key pair and send us his public key.
>
> Maybe for the client, it would be better to use also password based
> authentication, ask him - he is the client and he should define what he
> wants.

Hi Martin,

We shouldn't really be hosting his site (it turned out his ISP doesn't offer 
PHP), and I don't think he's paying anything for this, so he gets what we 
give :D

> > I can remove his login shell, but how do I restrict him to only view his
> > home directory over SFTP?
>
> I think that shells/scponly should have chroot ability for their users.

I'm looking at shells/rssh, which appears to be the most popular way to give 
restricted sftp access.  But I'm not having much luck with the chroot.  I 
might try scponly if I don't get anywhere.

Ashley
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Restricted SFTP access to server for one user

2006-03-28 Thread Martin Hudec

Hello Ashley,

Ashley Moran wrote:
I don't want to install an FTP program, and we 
don't use password authentication for SSH, so I'm going to tell him to create 
a key pair and send us his public key.


Maybe for the client, it would be better to use also password based 
authentication, ask him - he is the client and he should define what he 
wants.


I can remove his login shell, but how do I restrict him to only view his home 
directory over SFTP?


I think that shells/scponly should have chroot ability for their users.


Cheers,
Martin

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Restricted SFTP access to server for one user

2006-03-28 Thread Ashley Moran
Thanks to an unfortunate turn of events, we are hosting a website for a client 
that should have been hosted externally.  Now he wants FTP access to a 
directory on the server.  I don't want to install an FTP program, and we 
don't use password authentication for SSH, so I'm going to tell him to create 
a key pair and send us his public key.

I can remove his login shell, but how do I restrict him to only view his home 
directory over SFTP?

Thanks
Ashley
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"