Setup_SFTP_only_user_accounts_for_file_sharing
差别
这里会显示出您选择的修订版和当前版本之间的差别。
| 后一修订版 | 前一修订版 | ||
|
Setup_SFTP_only_user_accounts_for_file_sharing [2019/03/29 02:49] whr 创建 |
Setup_SFTP_only_user_accounts_for_file_sharing [2019/03/29 03:01] (当前版本) whr |
||
|---|---|---|---|
| 行 1: | 行 1: | ||
| SFTP is often used to transfer files in addition to usual shell access in SSH, by generic users. | SFTP is often used to transfer files in addition to usual shell access in SSH, by generic users. | ||
| - | In some scenarios, is possible to use OpenSSH SFTP server as a generic file transfer service to replace the traditional FTP service | + | In some scenarios, is possible to use OpenSSH SFTP server as a pure file transfer service to replace the traditional FTP service |
| * Create SFTP only users with a common primary group, such as **ftp** | * Create SFTP only users with a common primary group, such as **ftp** | ||
| 行 6: | 行 6: | ||
| * Set default shell to **nologin(8)** or **false(1)** to reject shell access for those users | * Set default shell to **nologin(8)** or **false(1)** to reject shell access for those users | ||
| * Set password for those users normally if you want to use password authentication method | * Set password for those users normally if you want to use password authentication method | ||
| - | * Modify **sshd_config(5)**, adding followings: | + | * Modify **sshd_config(5)** (usually ''/etc/ssh/sshd_config''), adding followings: |
| <code sshd_config> | <code sshd_config> | ||
| Match Group ftp | Match Group ftp | ||
| 行 16: | 行 16: | ||
| PermitTunnel no | PermitTunnel no | ||
| </code> | </code> | ||
| - | The above configuration mean for every users with **ftp** group logging from SSH, **chroot(2)** the sessions to their home directory, and allowing only SFTP session. | + | The above configuration mean for every users with **ftp** group logging from SSH, **chroot(2)** the session processes to their home directory, and allowing only SFTP session. |
| If you need to use public key authentication method for SFTP users, add | If you need to use public key authentication method for SFTP users, add | ||
| <code sshd_config> | <code sshd_config> | ||
Setup_SFTP_only_user_accounts_for_file_sharing.1553827741.txt.gz · 最后更改: 2019/03/29 02:49 由 whr
除额外注明的地方外，本维基上的内容按下列许可协议发布： CC Attribution-Share Alike 4.0 International
