We used to have a ftp user id with no telnet session allowed in server side.
We used this ftp user id in script by transferring file from client to Server.

Currently we need to implement sftp to replace ftp.

We have tested few round and working fine by using sftp with normal user id (allow telnet session).

However, when we use the ftp user id with no telnet session, the ftp straight away give the followng message "Connection Closed".



When we ssh'ing, the message is as follow :
/usr/bin/notelnet: Exec format error
Connection to xxx.yyy.zzz.com closed.
(which is correct, but the user id not allow telnet)


When we sftp, the message is as follow :

$ sftp <userid>@xxx.yyy.zzz.com
Connecting to xxx.yyy.zzz.com ...
Password:
Connection closed

I wonder if there are any setup required for ftp user id with no telnet session can execute sftp command.

Thanks.

Does this no-telnet-login setting disallow ssh shell logins as well? It's my understanding that sftp needs remote login, since it runs on top of an ordinary login connection to sshd.

You might find the scponly pseudoshell useful. When a user's login shell is scponly, they will be able to use sftp and scp, but won't get an interactive shell when they login with ssh.

Thanks Corona688,

I think I have figured it out, I've changed the shell to SFTP server subsystem (sftp-server) and now I can access sftp without having the telnet-login setting. The disadvantage is, normal ftp is no longer valid, user must use 'sftp' to transfer file instead of 'ftp'....