sftp_centos
Differences
This shows you the differences between two versions of the page.
| Both sides previous revisionPrevious revisionNext revision | Previous revision | ||
| sftp_centos [2016/10/19 14:06] – luke7858 | sftp_centos [2024/05/23 07:26] (current) – external edit 127.0.0.1 | ||
|---|---|---|---|
| Line 59: | Line 59: | ||
| useradd -d / | useradd -d / | ||
| </ | </ | ||
| - | \\ | ||
| Now change the password with | Now change the password with | ||
| <sxh bash> | <sxh bash> | ||
| Line 106: | Line 105: | ||
| \\ | \\ | ||
| You should perform the following: | You should perform the following: | ||
| + | == Option 1 == | ||
| <sxh bash> | <sxh bash> | ||
| - | chmod 711 /home/user/ | + | chmod 711 /home/ |
| chmod 755 / | chmod 755 / | ||
| Line 117: | Line 117: | ||
| chown lukes-jail: | chown lukes-jail: | ||
| </ | </ | ||
| - | + | == Option 2 == | |
| + | < | ||
| + | chmod 755 / | ||
| + | |||
| + | chown root:root / | ||
| + | </ | ||
| \\ | \\ | ||
| === Mounting === | === Mounting === | ||
| We can specify which directory we would like to mount and where. We need to edit /etc/fstab and type the following command. You will need to replace the first directory path with the path you wish to allow the sftp user access to. The second path is the chrooted sFTP users home directory. Add the following to the bottom of fstab: | We can specify which directory we would like to mount and where. We need to edit /etc/fstab and type the following command. You will need to replace the first directory path with the path you wish to allow the sftp user access to. The second path is the chrooted sFTP users home directory. Add the following to the bottom of fstab: | ||
| + | == Option 1 == | ||
| + | <sxh bash> | ||
| + | / | ||
| + | </ | ||
| + | |||
| + | == Option 2 == | ||
| + | \\ | ||
| <sxh bash> | <sxh bash> | ||
| / | / | ||
| Line 127: | Line 139: | ||
| Now we can mount a specific directory to the users chrooted home directory. | Now we can mount a specific directory to the users chrooted home directory. | ||
| \\ | \\ | ||
| - | Best practice is to use the mount -a command to mount the directory using the entry we have just made. | + | Best practice is to use the "mount" |
| \\ | \\ | ||
| This is to make sure there are no errors in the entry into /etc/fstab. If there are errors, we can resolve them before the server is rebooted however if we dont fix them before server reboot it can cause **SEVERE** issue and prevent the server from booting!! | This is to make sure there are no errors in the entry into /etc/fstab. If there are errors, we can resolve them before the server is rebooted however if we dont fix them before server reboot it can cause **SEVERE** issue and prevent the server from booting!! | ||
| Line 146: | Line 158: | ||
| Try logging in with the user via ssh, this should fail as we have disabled ssh login. | Try logging in with the user via ssh, this should fail as we have disabled ssh login. | ||
| <sxh bash> | <sxh bash> | ||
| - | ssh lukeisjailed@serverIP | + | ssh lukes-jail@serverIP |
| </ | </ | ||
| Now we can test sftp via command line with | Now we can test sftp via command line with | ||
| <sxh bash> | <sxh bash> | ||
| - | sftp lukeisjailed@serverIP | + | sftp lukes-jail@serverIP |
| </ | </ | ||
| This should prompt you for a password and then successfully log in. You should see: | This should prompt you for a password and then successfully log in. You should see: | ||
| Line 177: | Line 189: | ||
| </ | </ | ||
| <sxh bash> | <sxh bash> | ||
| - | sftp -p port user@host | + | sftp -P <port> user@host |
| </ | </ | ||
sftp_centos.1476885975.txt.gz · Last modified: 2024/05/23 07:26 (external edit)