Re: Solaris 9 sftp-server

"David M. Fetter" <[email protected]>
Newsgroups gmane.comp.security.sun
Organization Fetter Consulting
Message-ID <[email protected]>
BAUMLER Julie L wrote:
> We're using Sun's ssh sftp server on Solaris 9 for some (internal) customer
> file tranfers.  But, we don't want to allow these people to login or run
> commands with ssh.  The usual methods to restrict login (/bin/false, "exit"
> in shell profile files, ...) block both or don't work.  We need to be able
> to track file reads and writes, so we need the BSM support of the Solaris
> version of ssh.  Has anyone else run across this?

SFTP is a subsystem of SSH and therefore in order to use SFTP you must 
also provide SSH login access.  At this time I don't think there is a 
good way around this.  You could use something like restricted ksh 
(rksh) or some other restricted shell to tighten down their login access 
in a way that might make it so only SFTP is feasible to use for them.

-- 
David M. Fetter - http://www.fetterconsulting.com/

"The world is full of power and energy and a person can go far by just 
skimming off a tiny bit of it." Neal Stephenson - Snow Crash
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.