search for: mysecureshell

Dear all I'm looking for instructions on how to setup a jailed chroot directory for user which needs to upload via scp to the server. Especially I miss clear instructions about what needs to be in the jailed directory available, like binaries, libraries, etc... Without jail I get it to work, but I want to prevent user downloading for example /etc folder from the server. Does anybody have a

...ded to create an environment with only sftp access and thus used: - Match User suporte ForceCommand / usr / lib / openssh / sftp-server OK! It worked perfectly! But only sftp. - Create an environment with only blocking the ssh, but scp and sftp access, I used: - Rssh; - Mysecureshell; - Scponly. Work, but change my SHELL, and also created another environment for authentication and this is not good. So I suggest to you developers the following idea: - Create the following options to sshd_config: - DenyCmdssh - DenyCmdscp - DenyCmdsftp All three optio...

...ser with no valid shell (provided the home directory is owned by root and not writeable by the user and you use Subsystem internal-sftp). _______________________________________________ CentOS mailing list CentOS at centos.org https://lists.centos.org/mailman/listinfo/centos https://github.com/mysecureshell/mysecureshell

...any* Samba users logging on with ssh, the template > homedir = > /dev/null, and template shell = /bin/nologin. The other option is, setup a group in windows give it a GID and put the group in ssh. For example i use it 3 ways, like this: AllowGroups sftp-customer servers-ssh sshgroup I use MySecureShell for my SFTP users, and these must exist in the sftp-customers group. ( a windows group with GID ) The servers-ssh is use to allow logins. The sshgroup is the backup group with only linux members in them, admins only. Working like that you can control everything from within the AD. Your option...

I suggest to the op check my settings and try it. Should work. Not showing the security tab is often an wrong right in the underlaying folder. So in case of this one, i would check this first. ls -al /data/ ls -al /data/samba ls -al /data/samba/profiles chmod 775 /data/ ! In case of a chmod 770 or 750 make sure you have a group set that is known in windows. Same for /data/samba chmod