Re: SSH/FTP Access

2002-10-11 Thread James Green

Jason Morgan wrote:
 On Wed, Oct 09, 2002 at 11:28:16PM -0500, [EMAIL PROTECTED] wrote:
 
Just wondering is there a way to limit SSH access (when adding a user or period) so 
that user can only use SSH to access or effect their home directory?
 
 With ssh2 you can use chroot to limit access to other dirs. In your config:
 
 ChRootUsers user1,user2,user3
 
 you can also restric groups the same way:
 
 ChRootGroups group1,group2,group3
 
 Just don't forget to hardlink any system files into their directories so they can 
actually use their accounts. 
 
 Note: I've never done this myself and I just pulled the 'how-to' from O'Reilly's SSH 
book. This is a great resource,
 and I recommend you get a copy.

Just occassionally, the kind souls on freebsd-users come up with real 
gems of information. Thank you, I've been looking for a solution like 
this for weeks!

James



To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



Re: SSH/FTP Access

2002-10-10 Thread Jason Morgan

On Wed, Oct 09, 2002 at 11:28:16PM -0500, [EMAIL PROTECTED] wrote:
 Just wondering is there a way to limit SSH access (when adding a user or period) so 
that user can only use SSH to access or effect their home directory?

With ssh2 you can use chroot to limit access to other dirs. In your config:

ChRootUsers user1,user2,user3

you can also restric groups the same way:

ChRootGroups group1,group2,group3

Just don't forget to hardlink any system files into their directories so they can 
actually use their accounts. 

Note: I've never done this myself and I just pulled the 'how-to' from O'Reilly's SSH 
book. This is a great resource,
and I recommend you get a copy.

 
 Also is there a way to give (and limit) a user FTP access to another users home 
directory?

You mean besides changing permissions?

 Thanks!
 
 To Unsubscribe: send mail to [EMAIL PROTECTED]
 with unsubscribe freebsd-questions in the body of the message

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



Re: SSH/FTP Access

2002-10-10 Thread Doug Hardie


On Wednesday, Oct 9, 2002, at 21:28 US/Pacific, [EMAIL PROTECTED] 
wrote:

 Just wondering is there a way to limit SSH access (when adding a user 
 or period) so that user can only use SSH to access or effect their 
 home directory?

Not with the installed sshd


 Also is there a way to give (and limit) a user FTP access to another 
 users home directory?

Yes.  add the user ids or groups to /etc/ftpchroot.  See the manpage.  
That will restrict users to their home directory and its sub 
directories.


 Thanks!

 To Unsubscribe: send mail to [EMAIL PROTECTED]
 with unsubscribe freebsd-questions in the body of the message



To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



SSH/FTP Access

2002-10-09 Thread DiaDems

Just wondering is there a way to limit SSH access (when adding a user or period) so 
that user can only use SSH to access or effect their home directory?

Also is there a way to give (and limit) a user FTP access to another users home 
directory?

Thanks!

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message