Blocking SFTP for certain users

[BPatel_1]

Hi,

I am looking out at blocking SFTP access to certain users, but granting SSH access.

Is there any way I can do it.

Thanks in advance

BP

[Jeff_Traigle]

Might be possible with the latest 4.40 release. I didn't read the release notes in detail, but I think there were features added to do user level restrictions of some sort.

[BPatel_1]

Can you provide me more details on this please.

Thanks
BP

[Jeff_Traigle]

http://docs.hp.com/en/5991-7517/index.html

[Coolmar]

I don't think you can...see final answer in thread below:

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=999569&admit=-682735245+1166040567015+28353475

[Heironimus]

What are you trying to accomplish? Even if you could disable scp and sftp people with ssh access could still copy files around with something like "tar cf - ./myfiles | ssh server 'tar xf -'".

[George Liu_4]

Make no sense if you allow a user to ssh already since sftp normally is invoked from sshd using subsystem options. But you can force sshd not to enable sftp-server, and separate sftp-server from sshd. In that case, it is easy for you to set the restriction for some users.