Re: locking down sftp directory
- From: comphelp@xxxxxxxxx (Todd H.)
- Date: 22 Sep 2006 23:17:05 -0500
"tilopa" <wgilgallon@xxxxxxxxx> writes:
I just installed and configured Cygwin SSH on a Windows2003 DC. We want
to have external clients be able to sftp into this server and be able
to upload and download files from a single particular directory. But
when I test this functionality I can connect to the server and am
dumped into the correct dirctory but I can then uplevel to the cygwin
root directory and have access to everything there. I have searched
quite a bit for a solution and have found nothing, except for
references to chroot which apparently can only be configured on a pure
unix machine. It is puzzleing to me that more businesses would not need
this functionality, and what is the point of secure ftp if you cannot
lock your users into there home directory. Does anyone know of a better
free solution?
Ironically, it's the non-free operating system you're using
unfortunately is what's thwarting you it seems. :-)
But VanDyke's Vshell server may be worth the money if you can't get
where you wanna go with the free stuff
http://vandyke.com/products/vshell/index.html
Or... and this is kinky, and an idea off the top of my head, Vmware
Server http://www.vmware.com/products/server/ is free, and rocks. Use
it create a Linux virtual machine on that DC. Then, you can run
openssh on linux properly. A drive share can be made to cross the
virtual machine boundary if need be. Samba has PAM modules evidently
to allow to either auth against the 2003 DC directly, or to keep those
passwords in sync if the samba section of
http://www.kernel.org/pub/linux/libs/pam/modules.html is to be
believed.
And if someone hacks your ftp server, they're inside a virtual machine
jail by and large only with access to the windows 2003 directory you
specifically shared into the virtual machine.
But by the time you're done with that you may really wish you had
spent the money for vshell server. :-)
Best Regards,
--
Todd H.
http://www.toddh.net/
.
- References:
- locking down sftp directory
- From: tilopa
- locking down sftp directory
- Prev by Date: locking down sftp directory
- Next by Date: Re: locking down sftp directory
- Previous by thread: locking down sftp directory
- Next by thread: Re: locking down sftp directory
- Index(es):
Relevant Pages
|
|
