Sylvain Saboua <sylvain.saboua@free.fr> writes:
[...]
> $ more /etc/ssh/sshd_config # relevant extracts and changes :
> ...
> PermitRootLogin no
> ...
> # override default of no subsystems
> #Subsystem sftp /usr/libexec/sftp-server -d /home/media
> Subsystem sftp internal-sftp # -d /home/media
>
> Match User media
> ForceCommand internal-sftp -d /home/media
> ChrootDirectory /home/media
> PasswordAuthentication yes
> AuthenticationMethods none
> PermitEmptyPasswords yes
Hi,
I have a setup that looks like this (except I'm using pubkey
authentication). The only other difference I see is that I have not
specified the "-d" option for the internal-sftp command.
It is not clear to me (by manpages) if it should be the same as
ChrootDirectory or a path *under* ChrootDirectory. Maybe you could try
to remove this "-d" option.
--
Manuel Giraud
No comments:
Post a Comment