Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sources.redhat.com/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sources.redhat.com/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
From: "Tommie Porter" <tommie AT mcihispeed DOT net>
To: <cygwin AT cygwin DOT com>
Subject: SFTP only account
Date: Wed, 23 Jul 2003 20:48:28 -0400
Message-ID: <PIEAJDKPMCCDFENHCAHLCEJLCAAA.tommie@mcihispeed.net>
MIME-Version: 1.0
Content-Type: text/plain;
	charset="utf-8"
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
Importance: Normal
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165
X-ELNK-Trace: 83e9eaf44f6c6b158dda7175fe35595f8ac47703d5b28555164bacbf18cabf2b57ff2308352908673300f78b8fb6e36f3300f78b8fb6e36f3300f78b8fb6e36f
Content-Transfer-Encoding: 8bit
X-MIME-Autoconverted: from quoted-printable to 8bit by delorie.com id h6O0jFK27047

Sorry if this issue has been addressed before, but I can't find any instances of it in the archives.

First off, I want to know if it's possible to have an SFTP only account. I know it's possible(FTP only) on OpenBSD. If you set their shell to /bin/false, they can't log in remotely, but can still FTP in. This isn't working for me using SFTP in CYGWIN. If I set their shell to /bin/false, I get what I want when they try to SSH in, which is access denied, but they can't SFTP in either. So I was wondering if there is a way around this, or if there isn't because SFTP is running as a sub-system of SSH. Either way, I was hoping somebody has an answer.

Also, when this user SFTP's in, I have it set so that the SFTP user's home is my FTP directory. Is there a way to prevent them from getting out of this directory(i.e. cd .. or cd /cygwin/c/winnt)?

Regards,
TP


--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/