Re: FTP Access

On Feb 3, 1:02 pm, ExecMan <artme...@xxxxxxxxx> wrote:
Hi,

I need some help.  I am running CentOS 5.x.  I have disabled FTP and
only allow SSH / SFTP.   I would like to prevent certain users from
going outside their home directories.  So, when a given user logs in
to transfer files, or SSH's in, they are contained to their home
directory tree only.

I'm hoping this is not a long drawn out process.  If anyone has
anything more easily done, please let me know.

Thanks!

You don't use SSH and SFTP for this. Chroot functionality is *NOT*
built into it, and it's quite painful to support, and leaves confusing
debris in the accessible repository. I used to publish the notes on
how to do that for OpenSSH years ago, and gave up as it got too
awkward to integrate.

Instead, use WebDAV over HTTPS, which is directly accessible with lftp
and numerous other web tools for both upload and download, and is
built-in for Windows clients in "Network Neighborhood" to the relevant
website. It's also manageable with different virtual hosts, or
usernames, haveing write access and others having read-only access to
the same material, all handled in the HTTPD configurations without
mucking with the ownerhip in SSH based chroot cages.
.

Relevant Pages

  • Re: Batch job to perform sftp transfer
    ... It relies on copying datasets to temporary HFS files ... I used /bin/cat with ssh so that I could transfer the data and pipe it to ... The IBM version of sftp doesn't support datasets, ... Batch job to perform sftp transfer ...
    (bit.listserv.ibm-main)
  • Re: [opensuse] what networking file system to use for our home office?
    ... SSH server on Your "server" and from Your clients connect using SFTP or ... You can login using SSH ... certificates or just let clients' computers to remember passwords. ... I usually sit at university, so I have good connection, but even from home ...
    (SuSE)
  • Re: secure file transfer FROM z/OS
    ... FTPS. ... SSH SFTP. ... This is supported by z/OS Ported Tools - OpenSSH. ... better native z/OS features than Ported Tools SSH ...
    (bit.listserv.ibm-main)
  • Re: SPAM sudden increase
    ... up ssh for some sftp session and saw something odd... ... Dude was on a tech call with f-secure and the tech asked, "So, are you ... To which the dude replied, "Yeah, I'm ...
    (alt.2600)
  • Re: SFTP is not working
    ... When I try to use sftp or scp2, I get a message like this: ... sftp and scp2 both actually work by running ssh in a subprocess, ... The reason the shell startup files are relevant at all, ...
    (comp.security.ssh)