topic Re: sftp ?? in Operating System - HP-UX

sftp ??

MikeL_4 — Tue, 10 Oct 2006 14:16:41 GMT

We have a client that currently uses ftp to put files on our system. We have the user locked so he can only ftp, that is is default shell is: /bin/false.

when they try using sftp they enter there password and immediately get the message: connection closed.

I assume this is because we do not allow them login access to the server, is there any way around this besides giving them a shell instead of /bin/false ??

Re: sftp ??

IT_2007 — Tue, 10 Oct 2006 14:22:00 GMT

yes. User account might have been locked/deactivated. change shell to /usr/bin/sh and you can restrict user not to use "ftp" by putting his id into /etc/ftpd/ftpusers list.

Re: sftp ??

MikeL_4 — Tue, 10 Oct 2006 14:23:42 GMT

I want the user to be able to use ftp or sftp, but not be able to login directly to the server.

Re: sftp ??

Calandrello — Tue, 10 Oct 2006 14:44:29 GMT

friend o ssh esta habilitado e funcionando ok ?

Re: sftp ??

IT_2007 — Tue, 10 Oct 2006 15:11:09 GMT

you need to use some script to restrict the user.

Here is the perl script which was tested.

#!/usr/bin/perl -w
#
# When used as a login shell in /etc/passwd, this only allows
# use of the scp program.

exit(1) if ( !defined($ARGV[0]) || $ARGV[0] ne "-c" );
exit(1) if ( !defined($ARGV[1]) || $ARGV[1] !~ /^scp / );
argv = split (/ /, $ARGV[1] );
exec {"/usr/bin/scp"} argv;

Re: sftp ??

MikeL_4 — Wed, 11 Oct 2006 08:21:07 GMT

Thanks