secure shell and sftp with chroot

[David Woodroffe]

Currently we have some ftp only users using the ftpaccess file and home directory entries in passwd that look like ..../home/usr/./ (as per a setup given in the forums). However, for some applications it would be nice to use secure shells sftp and have similar facilities. We are looking at T1471AA as the base. Does anyone have a step by step process for sftp?

[Tim Maletic]

Hi David. The SSH products from SSH, Inc. support chrooted user account out of the box. The products from OpenSSH (upon which T1471AA are based) do not.

If you want to chroot logins with OpenSSH, you'll have to build from modified OpenSSH sources. (You should be able to track down a patch by googling on "chroot openssh".) If you want to go this route, but can't track down the patch, post back -- I've got it here somewhere...

-Tim

[David Woodroffe]

Thanks Tim. I thought this may have been the case after a carefull read of the T1471AA notes etc and failed to find a chroot reference. I'll keep your ofer in mind.