Force SFTP user to login to specific dir












0















The end goal here is to have an sftp user that logs into /home/user1/data



I have followed the instructions at the link below and they do work:
https://www.vultr.com/docs/setup-sftp-only-user-accounts-on-centos-7



I created a dir /home/user1/data, and if I try to change the ChrootDirectory value in the sshd_config from %h to /home/user1/data, my logins fail.



I need the user to login to that specific directory, any advice is appreciated.










share|improve this question























  • Been a long time andno longer have the system to check, but IIRC I did it by making the user's home dir under the chroot, ie, if you have /home/user1 then chrooting them to /home. Set shell to /bin/false or similar, etc put them in a group and use the group as your chroot on the sshd_config. Also you have to use the built-in sftp subsystem for it to work.

    – ivanivan
    3 hours ago
















0















The end goal here is to have an sftp user that logs into /home/user1/data



I have followed the instructions at the link below and they do work:
https://www.vultr.com/docs/setup-sftp-only-user-accounts-on-centos-7



I created a dir /home/user1/data, and if I try to change the ChrootDirectory value in the sshd_config from %h to /home/user1/data, my logins fail.



I need the user to login to that specific directory, any advice is appreciated.










share|improve this question























  • Been a long time andno longer have the system to check, but IIRC I did it by making the user's home dir under the chroot, ie, if you have /home/user1 then chrooting them to /home. Set shell to /bin/false or similar, etc put them in a group and use the group as your chroot on the sshd_config. Also you have to use the built-in sftp subsystem for it to work.

    – ivanivan
    3 hours ago














0












0








0








The end goal here is to have an sftp user that logs into /home/user1/data



I have followed the instructions at the link below and they do work:
https://www.vultr.com/docs/setup-sftp-only-user-accounts-on-centos-7



I created a dir /home/user1/data, and if I try to change the ChrootDirectory value in the sshd_config from %h to /home/user1/data, my logins fail.



I need the user to login to that specific directory, any advice is appreciated.










share|improve this question














The end goal here is to have an sftp user that logs into /home/user1/data



I have followed the instructions at the link below and they do work:
https://www.vultr.com/docs/setup-sftp-only-user-accounts-on-centos-7



I created a dir /home/user1/data, and if I try to change the ChrootDirectory value in the sshd_config from %h to /home/user1/data, my logins fail.



I need the user to login to that specific directory, any advice is appreciated.







chroot sshd






share|improve this question













share|improve this question











share|improve this question




share|improve this question










asked 6 hours ago









200mg200mg

625




625













  • Been a long time andno longer have the system to check, but IIRC I did it by making the user's home dir under the chroot, ie, if you have /home/user1 then chrooting them to /home. Set shell to /bin/false or similar, etc put them in a group and use the group as your chroot on the sshd_config. Also you have to use the built-in sftp subsystem for it to work.

    – ivanivan
    3 hours ago



















  • Been a long time andno longer have the system to check, but IIRC I did it by making the user's home dir under the chroot, ie, if you have /home/user1 then chrooting them to /home. Set shell to /bin/false or similar, etc put them in a group and use the group as your chroot on the sshd_config. Also you have to use the built-in sftp subsystem for it to work.

    – ivanivan
    3 hours ago

















Been a long time andno longer have the system to check, but IIRC I did it by making the user's home dir under the chroot, ie, if you have /home/user1 then chrooting them to /home. Set shell to /bin/false or similar, etc put them in a group and use the group as your chroot on the sshd_config. Also you have to use the built-in sftp subsystem for it to work.

– ivanivan
3 hours ago





Been a long time andno longer have the system to check, but IIRC I did it by making the user's home dir under the chroot, ie, if you have /home/user1 then chrooting them to /home. Set shell to /bin/false or similar, etc put them in a group and use the group as your chroot on the sshd_config. Also you have to use the built-in sftp subsystem for it to work.

– ivanivan
3 hours ago










1 Answer
1






active

oldest

votes


















0














Try setting ChrootDirectory back to %h, then set the home directory of user1 to /data. This assumes /home/user1 has a filesystem structure appropriate to chroot. You might need to modify the user1 home directory both in /etc/passwd, and in /home/user1/etc/passwd.



This wont lock user1 into the /home/user1/data directory, but that is where they will default to when logged in.






share|improve this answer























    Your Answer








    StackExchange.ready(function() {
    var channelOptions = {
    tags: "".split(" "),
    id: "106"
    };
    initTagRenderer("".split(" "), "".split(" "), channelOptions);

    StackExchange.using("externalEditor", function() {
    // Have to fire editor after snippets, if snippets enabled
    if (StackExchange.settings.snippets.snippetsEnabled) {
    StackExchange.using("snippets", function() {
    createEditor();
    });
    }
    else {
    createEditor();
    }
    });

    function createEditor() {
    StackExchange.prepareEditor({
    heartbeatType: 'answer',
    autoActivateHeartbeat: false,
    convertImagesToLinks: false,
    noModals: true,
    showLowRepImageUploadWarning: true,
    reputationToPostImages: null,
    bindNavPrevention: true,
    postfix: "",
    imageUploader: {
    brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
    contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
    allowUrls: true
    },
    onDemand: true,
    discardSelector: ".discard-answer"
    ,immediatelyShowMarkdownHelp:true
    });


    }
    });














    draft saved

    draft discarded


















    StackExchange.ready(
    function () {
    StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f507846%2fforce-sftp-user-to-login-to-specific-dir%23new-answer', 'question_page');
    }
    );

    Post as a guest















    Required, but never shown

























    1 Answer
    1






    active

    oldest

    votes








    1 Answer
    1






    active

    oldest

    votes









    active

    oldest

    votes






    active

    oldest

    votes









    0














    Try setting ChrootDirectory back to %h, then set the home directory of user1 to /data. This assumes /home/user1 has a filesystem structure appropriate to chroot. You might need to modify the user1 home directory both in /etc/passwd, and in /home/user1/etc/passwd.



    This wont lock user1 into the /home/user1/data directory, but that is where they will default to when logged in.






    share|improve this answer




























      0














      Try setting ChrootDirectory back to %h, then set the home directory of user1 to /data. This assumes /home/user1 has a filesystem structure appropriate to chroot. You might need to modify the user1 home directory both in /etc/passwd, and in /home/user1/etc/passwd.



      This wont lock user1 into the /home/user1/data directory, but that is where they will default to when logged in.






      share|improve this answer


























        0












        0








        0







        Try setting ChrootDirectory back to %h, then set the home directory of user1 to /data. This assumes /home/user1 has a filesystem structure appropriate to chroot. You might need to modify the user1 home directory both in /etc/passwd, and in /home/user1/etc/passwd.



        This wont lock user1 into the /home/user1/data directory, but that is where they will default to when logged in.






        share|improve this answer













        Try setting ChrootDirectory back to %h, then set the home directory of user1 to /data. This assumes /home/user1 has a filesystem structure appropriate to chroot. You might need to modify the user1 home directory both in /etc/passwd, and in /home/user1/etc/passwd.



        This wont lock user1 into the /home/user1/data directory, but that is where they will default to when logged in.







        share|improve this answer












        share|improve this answer



        share|improve this answer










        answered 4 hours ago









        FitzFitz

        592




        592






























            draft saved

            draft discarded




















































            Thanks for contributing an answer to Unix & Linux Stack Exchange!


            • Please be sure to answer the question. Provide details and share your research!

            But avoid



            • Asking for help, clarification, or responding to other answers.

            • Making statements based on opinion; back them up with references or personal experience.


            To learn more, see our tips on writing great answers.




            draft saved


            draft discarded














            StackExchange.ready(
            function () {
            StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f507846%2fforce-sftp-user-to-login-to-specific-dir%23new-answer', 'question_page');
            }
            );

            Post as a guest















            Required, but never shown





















































            Required, but never shown














            Required, but never shown












            Required, but never shown







            Required, but never shown

































            Required, but never shown














            Required, but never shown












            Required, but never shown







            Required, but never shown







            Popular posts from this blog

            Accessing regular linux commands in Huawei's Dopra Linux

            Can't connect RFCOMM socket: Host is down

            Kernel panic - not syncing: Fatal Exception in Interrupt