Question on creating SFTP user in RHEL 4.0

a2vr6 · 07-22-2008, 08:58 PM

I was wondering if there is a way to create an SFTP user that only has read and write access to there home directory. Would the following be correct?

useradd <user> -d /home/<user> -s /usr/bin/rssh

a2vr6 · 07-23-2008, 09:08 AM

Anyone able to help?

chort · 07-23-2008, 10:23 AM

From a bit of Googling it looks more complex than that. You need to setup the chroot environment, amongst other things. The documentation should be in /usr/share/doc or /usr/local/share/doc.

unSpawn · 07-23-2008, 12:07 PM

With OpenSSH 4.8p1 (OpenSSH actually is at 5.0p1 right now) there's now the builtin "ChrootDirectory" directive which means it doesn't need any third part apps anymore (announcement: http://undeadly.org/cgi?action=artic...20080220110039, usage example: http://www.debian-administration.org/articles/590). If you don't want to or can't use that version there's ways to chroot a user using Rssh (seriously deprecated) or scponlyc from Scponly (example: http://geekzine.org/2007/09/28/easy-...-with-scponly/, "hard" example: http://sublimation.org/scponly/wiki/...uildings_Jails). For EL RPMs see DAGs repo.