Boston Linux & UNIX was originally founded in 1994 as part of The Boston Computer Society. We meet on the third Wednesday of each month at the Massachusetts Institute of Technology, in Building E51.

BLU Discuss list archive


[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Discuss] Using sftp without a shell account



On Sun, Dec 28, 2014 at 08:58:13PM -0500, Bill Horne wrote:
> I'm setting up an LDAP-based server, which will be used for file
> transfers among other things. I'd like to allow LDAP users to access
> the machine via sftp, but I can't figure out how to do that without
> giving each user a local shell account, and I'm looking for advice.

The long and short of it is you need to make sure that OpenSSH is
using PAM, and that your PAM configuration is correct for doing LDAP
lookups for account info and such.  You also need to modify
/etc/nsswitch.conf.

This page may or may not be useful:

  https://wiki.debian.org/LDAP/NSS

> The LDAP users can access ftp without trouble, but not sftp.

That is potentially interesting, but there are a wide variety of ftp
servers, and configuring authentication for them varies as well.
Without more details about how your system is configured, I expect it
will be difficult to provide additional useful advice.

Hope that helps.

-- 
Derek D. Martin    http://www.pizzashack.org/   GPG Key ID: 0xDFBEAD02
-=-=-=-=-
This message is posted from an invalid address.  Replying to it will result in
undeliverable mail due to spam prevention.  Sorry for the inconvenience.




BLU is a member of BostonUserGroups
BLU is a member of BostonUserGroups
We also thank MIT for the use of their facilities.

Valid HTML 4.01! Valid CSS!



Boston Linux & Unix / webmaster@blu.org