[Ilugc] allowing users to use scp or sftp without giving them shell access
- From: pdavid@xxxxxxxxxx (Prasanna David)
- Date: Thu Jul 8 00:56:16 2004
Bharathi S wrote:
On Wed, 7 Jul 2004, Sridhar R wrote:
I installed (debian) vsftpd, but I can't connect to it from outside (SFTP).
I thought you need just sshd (and not ftpd) running for sftp or
scp and "Subsystem" option set appropriately in /etc/ssh/
sshd_config (for sftp).
That's OK. But the problem is in allowing users to use scp (thereby
sshd) but without giving them the shell.
Or, if you can be content with just sftp,
It is possible, however, to allow sftp without also allowing shell
access. You can do this by adding /opt/openssh/libexec/sftp-server (or
whatever the appropriate path on your platform is) to /etc/shells and
then setting the user's shell to also be /opt/openssh/libexec/sftp-server.
But I haven't tried it yet.
Other related posts: