Web Hosting Talk







View Full Version : WinSCP/SFTP with /bin/false


vanHelsing
07-24-2004, 07:39 AM
Is there a way to give SCP/SFTP access to the user without giving an option to user type shell commands.

/bin/bash
SCP/SFTP works fine.

/bin/false
SCP/SFTP dont work at all.

OR

Is there a way to make ProFTPD use SSH?

Bashar
07-24-2004, 07:49 AM
its not possible to give them shell access without shell access :D

scp uses secure shell commands so it requires real shell.

you might want to run sftp server anr let users ftp securely.

or run ssh tunnel for ftp from the PC to the server.

other option u can give them jailedshell not bash which has more limits than bash.

vanHelsing
07-24-2004, 08:06 AM
OK, i tryed to find info on that jailedshell without luck. Do someone have a nice howto in their favourites?

Also looking howto to make ssh tunnel to the proftp.

zupanm
07-24-2004, 08:10 AM
if you want to only give scp access there is a app called scponly. you set that to their shell and they can only get in via scp.. I'm not sure about sftp

http://www.sublimation.org/scponly/

vanHelsing
07-24-2004, 08:22 AM
Thx for the tip, im checking it out now. Seems pretty good. Chroot also availeble, and that is allways a good thing :)

vanHelsing
07-24-2004, 08:45 AM
Hehe, cant get it installed... noob me :bawling:

I untar it to /usr/local/scponly-3.11 and
./configure dont work.

After ./configure - make & make install, right?

zupanm
07-24-2004, 09:36 AM
what error did you get on the configure

vanHelsing
07-24-2004, 09:59 AM
bash: ./configure: /bin/sh: bad interpreter: Permission denied

Tryed to install as root.

zupanm
07-24-2004, 10:58 AM
try tunning

sh ./configure or
bash ./configure

sawbuck
07-24-2004, 11:04 AM
Also look at: http://www.cpanelfaq.com/index.php?aktion=artikel&rubrik=006&id=104&lang=en&highlight=sftp

Bashar
07-25-2004, 09:21 AM
Originally posted by vanHelsing
OK, i tryed to find info on that jailedshell without luck. Do someone have a nice howto in their favourites?

Also looking howto to make ssh tunnel to the proftp.

linux rh cpanel servers has jailedshell installed by default at /usr/local/cpanel/bin/jailshell

do you run freebsd?