Limiting SFTP Users While Not Limiting Regular Users?


 
Thread Tools Search this Thread
Operating Systems HP-UX Limiting SFTP Users While Not Limiting Regular Users?
Prev   Next
# 1  
Old 03-24-2009
Limiting SFTP Users While Not Limiting Regular Users?

Hi,

I have searched the web and have come back with nothing that is satisfactory for what I require. SFTP is my corporations new file transfer standard. What I require is a method to lock down SFTP users to their directory (they may go to sub directories) while not restricting regular users.

We setup a CHROOTed user in OpenSSH but it requires that the write option be disabled (for world and group) in all the parent directories of where we would like the SFTP user home directory to be. We tried to hard link the user directory to the location but it still requires write be disabled (for world and group) in the parent directories of the directory that is linked. An easy alternative would be to disable the CD command but once again I have not found a method to do so. Any ideas are greatly appreciated!

Thanks ahead of time!
 
Login or Register to Ask a Question

Previous Thread | Next Thread

9 More Discussions You Might Find Interesting

1. Shell Programming and Scripting

Limiting the Script

Greetings. I have script to monitor the disk space of folder it runs every 17 min with help of cron. It sends email when disk size reaches to 85 %. Now the issue is that it continousely generates email until we clear some space in that folder. Is it possible to restrict the Script to send only... (14 Replies)
Discussion started by: manju98458
14 Replies

2. UNIX for Advanced & Expert Users

Limiting access to postqueue

Hi, I have a Debian 6 machine running Postfix 2.7.1. The email server works pretty well. I discovered that any non-root user can access to the mail queue using postqueue command just like root. How can I limit this access? (1 Reply)
Discussion started by: mjdousti
1 Replies

3. Red Hat

Chroot sftp users, remote sftp login shows wrong timestamp on files

Hello, I have a weird issue, I have RHEL 5.7 running with openssh5.2 where sftpgroup OS group is chroot. I see the difference difference in timestamp on files, when I login via ssh and SFTP, I see four hour difference, is something missing in my configuration. #pwd... (8 Replies)
Discussion started by: bobby320
8 Replies

4. Solaris

Limiting Connections from a single IP

I'm looking for a way to limit connections to a Solaris 10 box from any single IP. The problem is that I've had more experience doing this with IPTables on Linux, rather than with IPFilter, which I've found to be somewhat feature-poor. I hope there is some way to do this using IPFilter, I've... (2 Replies)
Discussion started by: spynappels
2 Replies

5. Shell Programming and Scripting

Limiting output file size

Hi guys, I want to know if there is a way to check the current size of the file that I output "stuff" to. For example, if I run a command that outputs data (like another shell script or C program) and i do something like `./a.out &> tempfile.txt` within the script, I want to be constantly... (2 Replies)
Discussion started by: solaris7
2 Replies

6. HP-UX

limiting failed logins to three

I have tried limiting failed logins to three by the following method logins -ox \ | awk -F: '($8 != "LK" && $1 != "root") { print $1 }' \ | while read logname; do /usr/lbin/modprpw -m umaxlntr=3 "$logname" done /usr/lbin/modprdef -m umaxlntr=3 but it is failing on the 4th... any ideas?... (1 Reply)
Discussion started by: csaunders
1 Replies

7. Cybersecurity

Problem with limiting logins to one in AIX 5.3

I am migrating from 5.2 to 5.3 AIX. In previous versions of AIX, including 5.2, I've been able to limit user's logins to 1 by using the following script named Block_user: #!/bin/ksh USER=$1 NUM=`who | grep $USER | cut -c1-8 | wc -l` #The above ' is not a single quote but back quote if ]... (2 Replies)
Discussion started by: Confused_lulu
2 Replies

8. UNIX for Advanced & Expert Users

Limiting telnet sessions on HP UX Box

Anyone know how to limit the telnet sessions on a per user basis on an HP UX Box. I would like to limit the Maximum number of telnet seesions a user can open at any give time to around 4 or 5. I have been looking and looking and do not seem to be able to find anything on this. Any help would be... (2 Replies)
Discussion started by: Witlr
2 Replies

9. UNIX for Dummies Questions & Answers

Limiting access

Hi, I'm new to linux and unix, and i have couple of problems: 1) how can i limit the access for a user, for example, i created a user, and i want that this user will be able to be only in one directory, and will see only the files i want him to. 2) I have a domain name, and i want that every... (4 Replies)
Discussion started by: misha
4 Replies
Login or Register to Ask a Question
Net::SFTP::Foreign::Attributes(3pm)			User Contributed Perl Documentation		       Net::SFTP::Foreign::Attributes(3pm)

NAME
Net::SFTP::Foreign::Attributes - File/directory attribute container SYNOPSIS
use Net::SFTP::Foreign; my $a1 = Net::SFTP::Foreign::Attributes->new(); $a1->set_size($size); $a1->set_ugid($uid, $gid); my $a2 = $sftp->stat($file) or die "remote stat command failed: ".$sftp->status; my $size = $a2->size; my $mtime = $a2->mtime; DESCRIPTION
Net::SFTP::Foreign::Attributes encapsulates file/directory attributes for Net::SFTP::Foreign. It also provides serialization and deserialization methods to encode/decode attributes into Net::SFTP::Foreign::Buffer objects. USAGE
Net::SFTP::Foreign::Attributes->new() Returns a new "Net::SFTP::Foreign::Attributes" object. Net::SFTP::Foreign::Attributes->new_from_buffer($buffer) Creates a new attributes object and populates it with information read from $buffer. $attrs->as_buffer Serializes the Attributes object $attrs into a buffer object. $attrs->flags returns the value of the flags field. $attrs->size returns the values of the size field or undef if it is not set. $attrs->uid returns the value of the uid field or undef if it is not set. $attrs->gid returns the value of the gid field or undef if it is not set. $attrs->perm returns the value of the permissions field or undef if it is not set. See also "stat" in perlfunc for instructions on how to process the returned value with the Fcntl module. For instance, the following code checks if some attributes object corresponds to a directory: use Fctnl qw(S_ISDIR); ... if (S_ISDIR($attr->perm)) { # it is a directory! } $attrs->atime returns the value of the atime field or undef if it is not set. $attrs->mtime returns the value of the mtime field or undef if it is not set. %extended = $attr->extended returns the vendor-dependent extended attributes $attrs->set_size($size) sets the value of the size field, or if $size is undef removes the field. The flags field is adjusted accordingly. $attrs->set_perm($perm) sets the value of the permsissions field or removes it if the value is undefined. The flags field is also adjusted. $attr->set_ugid($uid, $gid) sets the values of the uid and gid fields, or removes them if they are undefined values. The flags field is adjusted. This pair of fields can not be set separatelly because they share the same bit on the flags field and so both have to be set or not. $attr->set_amtime($atime, $mtime) sets the values of the atime and mtime fields or remove them if they are undefined values. The flags field is also adjusted. $attr->set_extended(%extended) sets the vendor-dependent extended attributes $attr->append_extended(%more_extended) adds more pairs to the list of vendor-dependent extended attributes COPYRIGHT
Copyright (c) 2006-2008 Salvador Fandin~o. All rights reserved. This program is free software; you can redistribute it and/or modify it under the same terms as Perl itself. perl v5.14.2 2012-05-11 Net::SFTP::Foreign::Attributes(3pm)