Re: Distinguishing ssh-logins from sftp-logins

mog128 wrote:
Hello everybody,

I've got a case concerning sftp and ssh.

I want to setup an enviroment, in which user can do filetransfers using
sftp in a jail (chroot). Unfortunately there are some special
requirements to meet.

1. All user should be able to use sftp in a jail (their home
directory).

2. The majority of user (say regular users) should be able to login to
use sftp but should NOT get a Login to a system's shell! These users
are sftp-only-users.

3. A set of user (call them admins) should be able to login to use sftp
(like described in 1.) and should get a login to a shell too (in
contrast to 2.). I call them "ssh-users"

Does anybody know, how to achieve this or how to achieve a similar
functionality.
Any contributions are welcome.

I'm running debian woody on an Intel x86.

Thanks in advance und regards from Hamburg,

Mattes Opel

Why not using /usr/bin/false as shell for your non ssh-users?

stéphane.
.

Relevant Pages

  • Re: Disallow logins, but allow ftp?
    ... to login via sftp, it just says 'Connection closed'. ... Looks to me like sftp still checks the shell (or maybe ...
    (comp.security.ssh)
  • Allowing sftp without remote shell
    ... There's an account on my system for which I want to allow remote sftp ... this difficult is that sftp is invoked through a regular ssh login. ... If the user tries ssh to login remotely, the login succeeds but they're now ...
    (comp.os.linux.networking)
  • Allowing sftp without remote shell
    ... There's an account on my system for which I want to allow remote sftp ... this difficult is that sftp is invoked through a regular ssh login. ... If the user tries ssh to login remotely, the login succeeds but they're now ...
    (comp.os.linux.security)
  • Re: Distinguishing ssh-logins from sftp-logins
    ... I've got a case concerning sftp and ssh. ... The majority of user should be able to login to ... use sftp but should NOT get a Login to a system's shell! ... I tried many times and sftp restricted shell via rssh doesn't work for me in the chroot jail - while it is okay without the chroot jail. ...
    (comp.security.ssh)
  • RE: sftp vs ftp with ssl
    ... > account with interactive shell. ... I may very well be missing something here, but isn't anonymous sftp kind ... login, then run sshd in a chroot jail, kind of the way anonymous ftp ...
    (Security-Basics)