User Only For SFTP

[AZayed]

Dears,
Good day,

I would like to know how can I make a user called rpmFTP to login to my server using SFTP only. No Telnet, rlogin, FTP or SSH.

Also, Can I create a private/public key based on the "machine serial number" ? So, in case someone took the private key it will not work.

Thanks

[David P Lavoie]

Hi,

You'll find this pretty useful for sftp

http://forums11.itrc.hp.com/service/forums/questionanswer.do?admit=109447626+1291133058677+28353475&threadId=1264911

[vaasusworld]

Hi,

>>I would like to know how can I make a user called rpmFTP to login to my server using SFTP only. No Telnet, rlogin, FTP or SSH.

sftp (both server and client) internally uses SSH. If you want to use sftp, you will have to enable the secure shall.

When a user runs the sftp client application, the sftp client process spawns the ssh client, and then communicates.
The ssh client in turn establishes a socket connection with the sshd server. The rest of the server interaction is similar to that the ssh client.

Thanks & Regards,
Vasu

[vaasusworld]

Hi,

Incase if you want to disable Telnet, rlogin, FTP or SSH only for the rpmFTP account, then you can follow the steps provided in "Configuring sftp with chroot" link (Above link!)

I believe generating private/public key based on the "machine serial number" is not recommended. Because, anybody can see the machine serial number. It is written outside of the machine.

Thanks & Regards,
Vasu

[Jim Walls]

Assuming you have the latest HP version of HP-UX Secure Shell (T1471AA).

Look in /opt/ssh

Read the README files; they have full instructions for setting up tailored environments. Scripts are also provided for setting up these environments. See:

/opt/ssh/utils/

.