Ubuntu – How to allow SFTP with a password BUT not SSH

12.04ftpsftp

I have SSH keys set up for every user with which they SSH into the proper machines. The problem is that many FTP programs dont support SSH login. Therefore, only for FTP do I want to allow users to login with a password. How do I achieve this?

Best Answer

Here is a possible answer:

https://serverfault.com/questions/354615/allow-sftp-but-disallow-ssh

Link describes the use of

Subsystem sftp internal-sftp

Related Solutions

Using SFTP with SSH ForceCommand Directive – Configuration Guide

The trick to getting SFTP working is to pass on the SSH command received from the client as-is to the server. I discovered this while testing out what happens when you do scp or sftp for a question on Unix & Linux.

Now, my configuration looks like:

Match Group group1
       ForceCommand /usr/local/bin/ssh_wrapper group1

Match Group="*,!local,!group2,!root"
       ForceCommand /usr/local/bin/ssh_wrapper group3

Where /usr/local/bin/ssh_wrapper is:

#! /bin/sh

/usr/bin/ssh -t -o StrictHostKeyChecking=no $USER@${1:-default}.fqdn $SSH_ORIGINAL_COMMAND

From a couple of quick tests, sftp and scp work fine with this configuration.

Best Answer

Related Solutions

Using SFTP with SSH ForceCommand Directive – Configuration Guide

Related Question