Re: allow psftp or pscp but not ssh

From: Stein Arne Storslett (sastorsl_at_THOU.SHALT.NOT.SPAM.broadpark.no)
Date: 05/13/05 

Date: Fri, 13 May 2005 09:25:53 GMT

<yannick@pfnet.pf> wrote in <638398f4.0505121058.22dfc879@posting.google.com>:
> Stein Arne Storslett <sastorsl@THOU.SHALT.NOT.SPAM.broadpark.no>
> wrote in message news:<qakge.9747$SL4.220551@news4.e.nsc.no>...
>> <yannick@pfnet.pf> wrote in <638398f4.0505091250.5390909f@posting.google.com>:
>> > Hi,
>> >
>> > I use redhat AS3 with the default sshd configuration and putty as
>> > windows ssh client. Is it possible to allow only file transfert via
>> > psftp or pscp and deny access to ssh. I don't want users to login via
>> > ssh into the server, only file transfert is permitted. I read the
>> > /etc/ssh/sshd_config but found nothing to help me.
>>
>> Take a look at RSSH - http://www.pizzashack.org/rssh/index.shtml
>>
>> There should be a package for RedHat for that. There you can control
>> wether a user can scp, sftp, rsync, etc.
>>
>> You can also take a look at scponly and sftponly.
>>
>> You might also want to look into chroot'ing the user, but that's a whole
>> new chapter.
>
> Thank you for this link, but scponly allows users to browse the file
> system, I will try the chroot option but it not trivial. Is there an
> other way to lock users in their home directory ?

Openssh does not (last time I checked) support "built-in" chroot'ing. I
think the commercial SSH do, but I'm not sure.
So then you are faced with your OS' way of chroot'ing. It's not trivial,
that's true, but there should be a lot of HOWTO's out there.

I would think that if anybody would do the work on either openssh or a
utility like rssh/scponly/sftponly there would be a lot of "buyers". I
would definately throw myself over it. 

-- 
Stein Arne

Relevant Pages

  • Re: Does OpenSSH use RCP?
    ... > with someone about the difference between OpenSSH and SFTP. ... > SFTP) than SCP will fail. ... OpenSSH uses an implementation that is compatible to the original SSH ...
    (comp.security.unix)
  • Re: Does sftp or scp gaurentee delivery?
    ... >> Does anyone know if scp or sftp ensures that a transfer is complete. ... which uses the rsync protocol to duplicate the files instead of the ... option to rsync. ...
    (comp.security.ssh)
  • Re: ssh-agent
    ... >> file transfers in the form of scp, sftp, and rsync. ... It's such a fundamentally useful piece of networking infrastructure, ...
    (Debian-User)
  • Re: Does OpenSSH use RCP?
    ... >with someone about the difference between OpenSSH and SFTP. ... >SFTP) than SCP will fail. ... >agreeing with is telling me that Openssh uses the RCP protocol. ... scp uses the "rcp" protocol. ...
    (comp.security.unix)
  • Re: [opensuse] Upload/download files from public domain using Apache server
    ... do user authentication and file transfer in a secure way, like sftp. ... If your users need point and click, then I would recommend that you set up vsftp. ... then have them use scp or rsync. ...
    (SuSE)