Re: restricting ssh access

From: J.D. Baldwin (INVALID_SEE_SIG_at_example.com.invalid)
Date: 03/23/05

  • Next message: cnystrom_at_gmail.com: "Re: SSH for Binary Data Pipe" 
    Date: Wed, 23 Mar 2005 16:12:22 +0000 (UTC)

    In the previous article, Chuck <skilover_nospam@softhome.net> wrote:
    > Is there a way to prevent ssh access to a user account while still
    > allowing sftp or scp file transfers?

    I have been doing this reliably with

        http://www.sublimation.org/scponly/

    for some months now. Great little tool and it even supports chroot. 

    -- 
  _+_ From the catapult of |If anyone disagrees with any statement I make, I
_|70|___:)=}- J.D. Baldwin |am quite prepared not only to retract it, but also
\      /  baldwin@panix.com|to deny under oath that I ever made it. -T. Lehrer
***~~~~-----------------------------------------------------------------------
  • Next message: cnystrom_at_gmail.com: "Re: SSH for Binary Data Pipe"

    Relevant Pages

    • Re: restricting ssh access
      ... > Is there a way to prevent ssh access to a user account while still ... > sftp or scp file transfers? ... > and have full shell access. ...
      (comp.security.ssh)
    • Re: sftp and restricted shell
      ... I commment out the 5 lines of code you indicated. ... into the user account which uses restricted shell using sftp. ...
      (comp.security.ssh)
    • Re: restrict ssh access
      ... On Apr 25, 2008, at 6:46 AM, Geert Geurts wrote: ... of sftp by a group of users, and limit their ssh access to just allow ... running passwd so they can change their default password. ...
      (freebsd-questions)
    • Re: sftponly
      ... I would, instead, recommend a solid chroot/jail for SSH access, rather than ... >> But I want that some of them have only sftp, ... >> Regards, ...
      (SSH)
    • Re: restricting ssh access
      ... >>Is there a way to prevent ssh access to a user account while still ... need them to have normal shell access so long as the user first ssh's to ... a different account and then su's to the account in question. ... disable direct ssh access to the account but allow indirect shell access ...
      (comp.security.ssh)