[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [cobalt-users] SFTP

Greg O'Lone wrote:

I know this is a topic gone over in the past, checked the archives but
couldn't find the answer I was looking for...anyway...

Is there something special I need to do to enable SFTP on a RaQ4? Right
now, when a user tries to log in, they get an error back from the box
that says:

************************* Access Denied *************************
*                                                               *
* Sorry, you do not have telnet/shell access to this Cobalt     *
* server.                                                       *
*                                                               *
*****************************************************************

But I thought that having telnet/shell access is a security risk? Is
there any way to let users have SFTP without the shell access?
If you set the user's shell to be sftp-server (well, "/usr/libexec/openssh/sftp-server" or whereever it is on your RaQ4), the user will be able to use SFTP only. There's no way to do this through the GUI. You'll probably have to hack /etc/passwd.
I don't remember what was wrong with this approach other than the lack of GUI support, but I do remember there was some shortcoming with it. We concluded that we needed to look at a couple of opensource SFTP shells as we were not happy with deploying the sftp-server approach to customers. 

Regards,

	Richard.