Re: Solaris 9 sftp-server
"David M. Fetter" <[email protected]>
| Newsgroups | gmane.comp.security.sun |
|---|---|
| Organization | Fetter Consulting |
| Message-ID | <[email protected]> |
BAUMLER Julie L wrote: > We're using Sun's ssh sftp server on Solaris 9 for some (internal) customer > file tranfers. But, we don't want to allow these people to login or run > commands with ssh. The usual methods to restrict login (/bin/false, "exit" > in shell profile files, ...) block both or don't work. We need to be able > to track file reads and writes, so we need the BSM support of the Solaris > version of ssh. Has anyone else run across this? SFTP is a subsystem of SSH and therefore in order to use SFTP you must also provide SSH login access. At this time I don't think there is a good way around this. You could use something like restricted ksh (rksh) or some other restricted shell to tighten down their login access in a way that might make it so only SFTP is feasible to use for them. -- David M. Fetter - http://www.fetterconsulting.com/ "The world is full of power and energy and a person can go far by just skimming off a tiny bit of it." Neal Stephenson - Snow Crash