topic User Only For SFTP in Operating System - HP-UX

User Only For SFTP

AZayed — Tue, 30 Nov 2010 15:51:08 GMT

Dears,
Good day,

I would like to know how can I make a user called rpmFTP to login to my server using SFTP only. No Telnet, rlogin, FTP or SSH.

Also, Can I create a private/public key based on the "machine serial number" ? So, in case someone took the private key it will not work.

Thanks

Re: User Only For SFTP

David P Lavoie — Tue, 30 Nov 2010 16:06:26 GMT

Hi,

You'll find this pretty useful for sftp

http://forums11.itrc.hp.com/service/forums/questionanswer.do?admit=109447626+1291133058677+28353475&threadId=1264911

Re: User Only For SFTP

vaasusworld — Wed, 01 Dec 2010 11:52:05 GMT

Hi,

>>I would like to know how can I make a user called rpmFTP to login to my server using SFTP only. No Telnet, rlogin, FTP or SSH.

sftp (both server and client) internally uses SSH. If you want to use sftp, you will have to enable the secure shall.

When a user runs the sftp client application, the sftp client process spawns the ssh client, and then communicates.
The ssh client in turn establishes a socket connection with the sshd server. The rest of the server interaction is similar to that the ssh client.

Thanks & Regards,
Vasu

Re: User Only For SFTP

vaasusworld — Wed, 01 Dec 2010 14:25:33 GMT

Hi,

Incase if you want to disable Telnet, rlogin, FTP or SSH only for the rpmFTP account, then you can follow the steps provided in "Configuring sftp with chroot" link (Above link!)

I believe generating private/public key based on the "machine serial number" is not recommended. Because, anybody can see the machine serial number. It is written outside of the machine.

Thanks & Regards,
Vasu

Re: User Only For SFTP

Jim Walls — Thu, 02 Dec 2010 00:23:01 GMT

Assuming you have the latest HP version of HP-UX Secure Shell (T1471AA).

Look in /opt/ssh

Read the README files; they have full instructions for setting up tailored environments. Scripts are also provided for setting up these environments. See:

/opt/ssh/utils/

.