You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

1.5 KiB

Raw Blame History

sftp configurstion

Reference

Steps

Create a New Group
```
$ groupadd mitechextusers
```

Create Users

# create mitechext_sw

$ useradd -g mitechextusers -d /sftp/mitechext/software/software/shared -s /sbin/nologin mitechext_sw

# change mitechext_sw password

$ passwd mitechext_sw

# verify creation

$ grep mitechext_sw /etc/passwd

Setup sshd_config

$ nano /etc/ssh/sshd_config

Comment out Subsystem sftp /usr/libexec/openssh/sftp-server. Add the following

#Subsystem sftp /usr/libexec/openssh/sftp-server
Subsystem sftp internal-sftp

Match User mitechext_sw
  ChrootDirectory /sftp/mitechext/software
  ForceCommand internal-sftp

Create sftp home directory

$ mkdir /sftp
$ mkdir /sftp/mitechext/software
$ mkdir /sftp/mitechext/software/shared

# set folder ownership
$ chown mitechext_sw:mitechextusers /sftp//mitechext/software/shared

# verify ownership
$ ls -ld /sftp//mitechext/software/shared
drwxr-xr-x 2 mitechext_sw mitechextusers 4096 Dec 28 23:49 /sftp//mitechext/software/shared

$ ls -ld /sftp//mitechext/software
drwxr-xr-x 3 root root 4096 Dec 28 23:49 /sftp/guestuser

$ ls -ld /sftp//mitechext
drwxr-xr-x 3 root root 4096 Dec 28 23:49 /sftp

Restart sshd

$ service sshd restart

OR 

$ systemctl restart ssh

6 Test setup

# user should only able to access the incoming folder as root level
$ sftp mitechext_sw@127.0.0.1

1.5 KiB Raw Blame History

sftp configurstion

Steps

1.5 KiB

Raw Blame History