topic Re: Blocking SFTP for certain users in Operating System - HP-UX

Blocking SFTP for certain users

BPatel_1 — Wed, 13 Dec 2006 14:27:05 GMT

Hi,

I am looking out at blocking SFTP access to certain users, but granting SSH access.

Is there any way I can do it.

Thanks in advance

BP

Re: Blocking SFTP for certain users

Jeff_Traigle — Wed, 13 Dec 2006 14:55:29 GMT

Might be possible with the latest 4.40 release. I didn't read the release notes in detail, but I think there were features added to do user level restrictions of some sort.

Re: Blocking SFTP for certain users

BPatel_1 — Wed, 13 Dec 2006 14:59:34 GMT

Can you provide me more details on this please.

Thanks
BP

Re: Blocking SFTP for certain users

Jeff_Traigle — Wed, 13 Dec 2006 15:04:16 GMT

http://docs.hp.com/en/5991-7517/index.html

Re: Blocking SFTP for certain users

Coolmar — Wed, 13 Dec 2006 15:11:35 GMT

I don't think you can...see final answer in thread below:

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=999569&admit=-682735245+1166040567015+28353475

Re: Blocking SFTP for certain users

Heironimus — Wed, 13 Dec 2006 15:44:44 GMT

What are you trying to accomplish? Even if you could disable scp and sftp people with ssh access could still copy files around with something like "tar cf - ./myfiles | ssh server 'tar xf -'".

Re: Blocking SFTP for certain users

George Liu_4 — Wed, 13 Dec 2006 16:01:29 GMT

Make no sense if you allow a user to ssh already since sftp normally is invoked from sshd using subsystem options. But you can force sshd not to enable sftp-server, and separate sftp-server from sshd. In that case, it is easy for you to set the restriction for some users.