Re: Disable ssh login + enable scp for specific users.

From: Martin Sarsale (msarsale_at_buenosaires.gov.ar)
Date: 01/21/04

  • Next message: Dominik Schleich: "Re: Disable ssh login + enable scp for specific users." 
    To: Loris Serena <lserena@paddypower.com>
Date: Wed, 21 Jan 2004 13:38:02 -0300

    > 1. disallow user-xyz to login via ssh to a specific box;
    > 2. let user-xyz be able to scp to said box;

    use a scp only shell (for example, 'scponly')

    > 3. let anybody else ssh to said box and then su - user-xyz.

    Im not sure if you can do this.
    This might be a bad idea but you can add a user with the SAME UID and
    GID as user-xyz with an interactive shell.
    This will probablly work, but it's a ugly hack.

  • Next message: Dominik Schleich: "Re: Disable ssh login + enable scp for specific users."

    Relevant Pages

    • vulnerabilities in scponly
      ... without allowing shell access. ... scponly makes no effort to verify the path to the scp or sftp-server ... arbitrary commands by simply uploading a file. ... However, if this is *NOT* the case, the user could execute arbitrary ...
      (Bugtraq)
    • Re: scp syntax and denied permission
      ... >> this is sort of a newby question but in some regards it might be not. ... > The tilde is interpreted by the shell and ... on the destination system, so if home dirs are different on the 2 boxes, you'll ... >> When I try to copy the next higher directory the scp starts but once ...
      (comp.unix.shell)
    • Re: scp does not copy, no error msg, ssh works
      ... > scp gets confused if there is any output from the target. ... sourced on every interactive invocation of the shell. ... only when it's a login shell. ...
      (Debian-User)
    • Re: scp exploit
      ... want scp, but not necessarily the ability to pass in commands. ... server's running a restricted shell then the shell ought to filter the ... from sending a command string via ssh containing ";" (or any other shell ...
      (comp.security.ssh)
    • Re: Difference between SCP and SFTP ?
      ... >>But It's seems that SCP need a user Shell, ... > sftp is just FTP over SSH. ... It's interface is similar to FTP, ...
      (comp.security.ssh)
    • Quantcast