04-27-2012
chroot sftp, samba share, ownership issue linux hosts
Hello,
I have sftp server with chroot for a group[sftpgroup] and username is [sftpuser] on a Linux host, I have created a few subdirectories under sftpuser home directories with 775. Then using a Samba I shared this user home directory to another linux client.
On the Linux client, I have jboss user to access these subdirectories to perform read, write, move and delete operations. I created a sftpgroup on the client host, and added secondary group to Jboss user and also created the jboss user on the sftpserver and assigned sftpgroup as secondary group.
now the issue on the linux client is, when ever user jboss creates a new file, under these shared sub-directories, the ownership permission on file are being updated with sftpuser and sftpgroup. Not sure how to pass the local ownership credentials to the file.
Thanks
10 More Discussions You Might Find Interesting
1. Linux
Hi everyone! I'm trying to run a script when a folder is shared and when it stop being shared.
Is there something like .start_share or .stop_share scripts in Samba where I could run some commands?:confused:
edit: maybe with a wrapper in smbmount but I share folders via nautilus. Any ideas? (0 Replies)
Discussion started by: funyotros
0 Replies
2. Solaris
Hello all, does anybody knows a procedure to enable an chroot for users using ssh and sftp ? Thanks (1 Reply)
Discussion started by: celord
1 Replies
3. Solaris
Hi All, I've been trying to configure samba on Solaris 10 to allow me to have one share that is open and writable to all users and have the rest of my shares password protected by a generic account.
If I set my security to user, my secured shares work just fine and prompt accordingly, but when... (0 Replies)
Discussion started by: ideal2545
0 Replies
4. Red Hat
Hi
I need a specific user to be able to sftp to a server and get files from a specific location. The location is not the users home dir, i don't want the user to be able to view anything else apart from the files in that area.
e.g ftp file are is - /logging/phplogs
e.g user home is... (1 Reply)
Discussion started by: duckeggs01
1 Replies
5. Red Hat
Hello,
I have a weird issue, I have RHEL 5.7 running with openssh5.2 where sftpgroup OS group is chroot. I see the difference difference in timestamp on files, when I login via ssh and SFTP, I see four hour difference, is something missing in my configuration.
#pwd... (8 Replies)
Discussion started by: bobby320
8 Replies
6. AIX
I have next configuration :
- AIX 5.3 (5300-11-03-1013)
- pWare.SAMBA 3.5.8.1
- OpenSSH 5.2.0
- OpenSSL 0.9.8
Now, to be more clearly I'll explain what I need indeed.
My task is set up integration AIX server to Active Directory 2008 with Samba (Winbind) for chrooted SSH connections.
It... (3 Replies)
Discussion started by: jess_t03
3 Replies
7. Red Hat
Hi ,
In samba i have shared my home directory,
but its showing as a printer.
Not able to share data.
$ smbclient -L 192.168.122.1
Enter priyank's password:
Domain= OS= Server=
Sharename Type Comment
--------- ---- -------
shared_priyank Printer ... (3 Replies)
Discussion started by: Priy
3 Replies
8. Linux
Hi,
I am using RedHat 6 and ,I am trying to force a domain user (from Windows AD) to take ownership of a file when it is created, or copied on a Samba share. I have managed to get this working for the root user using the code below:
COMMENT = IT Data Share
path =... (2 Replies)
Discussion started by: p2bas
2 Replies
9. Red Hat
Long running samba share. Never have any problems,
Suddenly started asking windows users for password - which doesnt work. Tried to manually reset smb password and manually map - still wrong password.
Restart samba? (2 Replies)
Discussion started by: psychocandy
2 Replies
10. UNIX for Advanced & Expert Users
Hi,
I need to mount a directory from a Windows server to a CentOS box.
The Windows server used is Windows Server 2003, and the path to the directory that I want to mount on CentOS is C:\Tomcat6\webapps\NASApp\logs.
I am not sure of the correct way to mount this on CentOS, as most of the... (2 Replies)
Discussion started by: anaigini45
2 Replies
LEARN ABOUT OSX
sftp-server
SFTP-SERVER(8) BSD System Manager's Manual SFTP-SERVER(8)
NAME
sftp-server -- SFTP server subsystem
SYNOPSIS
sftp-server [-ehR] [-d start_directory] [-f log_facility] [-l log_level] [-u umask]
DESCRIPTION
sftp-server is a program that speaks the server side of SFTP protocol to stdout and expects client requests from stdin. sftp-server is not
intended to be called directly, but from sshd(8) using the Subsystem option.
Command-line flags to sftp-server should be specified in the Subsystem declaration. See sshd_config(5) for more information.
Valid options are:
-d start_directory
specifies an alternate starting directory for users. The pathname may contain the following tokens that are expanded at runtime: %%
is replaced by a literal '%', %h is replaced by the home directory of the user being authenticated, and %u is replaced by the user-
name of that user. The default is to use the user's home directory. This option is useful in conjunction with the sshd_config(5)
ChrootDirectory option.
-e Causes sftp-server to print logging information to stderr instead of syslog for debugging.
-f log_facility
Specifies the facility code that is used when logging messages from sftp-server. The possible values are: DAEMON, USER, AUTH,
LOCAL0, LOCAL1, LOCAL2, LOCAL3, LOCAL4, LOCAL5, LOCAL6, LOCAL7. The default is AUTH.
-h Displays sftp-server usage information.
-l log_level
Specifies which messages will be logged by sftp-server. The possible values are: QUIET, FATAL, ERROR, INFO, VERBOSE, DEBUG, DEBUG1,
DEBUG2, and DEBUG3. INFO and VERBOSE log transactions that sftp-server performs on behalf of the client. DEBUG and DEBUG1 are
equivalent. DEBUG2 and DEBUG3 each specify higher levels of debugging output. The default is ERROR.
-R Places this instance of sftp-server into a read-only mode. Attempts to open files for writing, as well as other operations that
change the state of the filesystem, will be denied.
-u umask
Sets an explicit umask(2) to be applied to newly-created files and directories, instead of the user's default mask.
For logging to work, sftp-server must be able to access /dev/log. Use of sftp-server in a chroot configuration therefore requires that
syslogd(8) establish a logging socket inside the chroot directory.
SEE ALSO
sftp(1), ssh(1), sshd_config(5), sshd(8)
T. Ylonen and S. Lehtinen, SSH File Transfer Protocol, draft-ietf-secsh-filexfer-00.txt, January 2001, work in progress material.
HISTORY
sftp-server first appeared in OpenBSD 2.8.
AUTHORS
Markus Friedl <markus@openbsd.org>
BSD
January 4, 2013 BSD