sftp ??

[MikeL_4]

We have a client that currently uses ftp to put files on our system. We have the user locked so he can only ftp, that is is default shell is: /bin/false.

when they try using sftp they enter there password and immediately get the message: connection closed.

I assume this is because we do not allow them login access to the server, is there any way around this besides giving them a shell instead of /bin/false ??

[IT_2007]

yes. User account might have been locked/deactivated. change shell to /usr/bin/sh and you can restrict user not to use "ftp" by putting his id into /etc/ftpd/ftpusers list.

[MikeL_4]

I want the user to be able to use ftp or sftp, but not be able to login directly to the server.

[Calandrello]

friend o ssh esta habilitado e funcionando ok ?

[IT_2007 · Accepted solution]

you need to use some script to restrict the user.

Here is the perl script which was tested.

#!/usr/bin/perl -w
#
# When used as a login shell in /etc/passwd, this only allows
# use of the scp program.


exit(1) if ( !defined($ARGV[0]) || $ARGV[0] ne "-c" );
exit(1) if ( !defined($ARGV[1]) || $ARGV[1] !~ /^scp / );
argv = split (/ /, $ARGV[1] );
exec {"/usr/bin/scp"} argv;

[MikeL_4]

Thanks