Login or Register to Ask a Question and Join Our Community


UNIX for Advanced & Expert Users

How to restrict user to sftp usage?

Login to Discuss or Reply to this Discussion in Our Community

 
Thread Tools Search this Thread
Top Forums UNIX for Advanced & Expert Users How to restrict user to sftp usage?
# 1  
Old 07-30-2007
How to restrict user to sftp usage?
Hi everyone!

I have a problem...
I need to restrict user to sftp usage only from one computer to another...

I mean that the user cannot login to the computer or even use sftp from other computer only from the one i allow.

thanx for the help!
# 2  
Old 07-30-2007
move "sftp" to /sbin folder for example, and set it with root:root priviledges, but he can still use "scp" as well, what is the actual idea behind that ? Resrict usage to ssh tools at all, or create rules for certain destinations, please shed some more light.
# 3  
Old 07-30-2007
Hi...

the idea is to make a user account that would be used only for file transfers...
but it's important that whoever log into that account would do that from a specific computer and would not get a shell...

thanx.
# 4  
Old 07-30-2007
If the destination and source computers are always the same then you could make the user's shell in /etc/passwd, sftp and add the required arguments.

Or you could give the user a restricted shell and place a link to sftp in $HOME/bin for that user.
# 5  
Old 07-31-2007
Quote:
Originally Posted by jgt
If the destination and source computers are always the same then you could make the user's shell in /etc/passwd, sftp and add the required arguments.

Or you could give the user a restricted shell and place a link to sftp in $HOME/bin for that user.

that could be a good solution...!
can someone give me an example for the arguments i need?
# 6  
Old 07-31-2007
Lightbulb
Hi ,
to restrict for only one computer to be allowed is
with use TCP Wrappers. which it must be installed first on the machine..
and then, edit the /etc/hosts.allow as follow:

sshd:<ip address>:allow

example:
sshd:10.195.5.120:allow

and edit the /etc/hosts.deny as follow:

ALL:ALL EXCEPT localhosts:deny


then ,
you can edit $HOME/.profile with add command :
exit

this is for restricting access user to the shell prompt..
and the user account is able to use sftp/scp only.
# 7  
Old 07-31-2007
Quote:
Originally Posted by mdjuarsa
Hi ,
to restrict for only one computer to be allowed is
with use TCP Wrappers. which it must be installed first on the machine..
and then, edit the /etc/hosts.allow as follow:

sshd:<ip address>:allow

example:
sshd:10.195.5.120:allow

and edit the /etc/hosts.deny as follow:

ALL:ALL EXCEPT localhosts:deny


then ,
you can edit $HOME/.profile with add command :
exit

this is for restricting access user to the shell prompt..
and the user account is able to use sftp/scp only.
Thanx a lot but...
Tcp Wrappers solution is no good for me because it's a production computers so i can't install anything new...
Login or Register to Ask a Question

Previous Thread | Next Thread

10 More Discussions You Might Find Interesting

1. Solaris

How can i restrict user high cpu usage?

HI In my M5000 , one of domain is having SAp installed. from today onwards we are facing some stange issue. when we start SAP application, that particular user is taking 95 % of system CP and renaming 5 % is taken by system . because of this reason application is slow. i have 4 CPU(32... (4 Replies)
Discussion started by: bentech4u
4 Replies

2. AIX

How to restrict user to a particular directory?

hi, I want to restrict some user access to only 1 directory (including all sub-directories/files in it). can you please explain me, how can we do this? example; Filesystem GB blocks Used Free %Used Mounted on /dev/hd4 2.61 1.02 1.59 40% / /dev/hd2 ... (7 Replies)
Discussion started by: aaron8667
7 Replies

3. UNIX for Dummies Questions & Answers

Memory usage per user,percent usage,sytem time in ksh

Let's say i have 20 users logged on Server. How can I know how much memory percent used each of them is using with system time in each user? (2 Replies)
Discussion started by: roy1912
2 Replies

4. Shell Programming and Scripting

How to restrict ssh by forced commands but sftp login should be enabled?

Hi, I am trying to restrict an ssh-user to execute unwanted commands using ssh from a remote host a. So for that I am using the forced command in the authorized_keys file that will allow the ssh-user to only execute a particular command. If I did not set this, I am able to login via ssh and... (2 Replies)
Discussion started by: Anil George
2 Replies

5. Red Hat

Restrict user access

Hi there I have an application user on my system that wants accesses to these file systems as such: rwx: /SAPO /SAPS12 /R3_888 /R3_888B /R3_888F /R3_888R r: /usr/sap these are the existing FS permissions:ownerships: # ls -ld /SAPO (9 Replies)
Discussion started by: hedkandi
9 Replies

6. UNIX for Dummies Questions & Answers

Restrict user access.

Hi All, How can we restrict a particular user access to a particular shell in solaris 10. Thanks in Advance. (5 Replies)
Discussion started by: rama krishna
5 Replies

7. Red Hat

Restrict user to a particular directory

Hi I have a Fedora10 server and i need a particular user to view files only in a particular folder. All other files in other folders having "read" permission for all shouldn't be accessible to this user. Please let me know if ther's a way. Thanks, HG (5 Replies)
Discussion started by: Hari_Ganesh
5 Replies

8. UNIX for Dummies Questions & Answers

Restrict command for an user ?

Hi everyone ! I got "viewer" and "root" user on a *nix computer. When i log in using "viewer" I only can use "df" command. When I try another command like "ls" it say : -bash: ls: command not found I checked permission of "/bin/ls" file, it has excute permission for everyone. Inside home... (4 Replies)
Discussion started by: camus
4 Replies

9. Solaris

restrict a user to certain command

Hi all, I am using Sun OS 5.10. I am new to Unix. Is there some way to restrict a specific user to certain command say "/usr/bin/more" ?? for example: I want that user1 can execute more command & user2 can't. Can we somehow edit .profile file in the home directory of user to achieve... (1 Reply)
Discussion started by: vikas027
1 Replies

10. UNIX for Advanced & Expert Users

how to restrict memory usage by a process

we are running red hat ES4 and i would like to know if there is anyway of restrcting the maximum amount of memory that a process can get? I have a single preocess that is taking >13GB. Thanks, Frank (4 Replies)
Discussion started by: frankkahle
4 Replies
Login or Register to Ask a Question