Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Is it possible to setup a SFTP service with OpenSSH with the use of virtual users (not /etc/passwd)? I'm aware of all the chroot/jail capabilities of OpenSSH. I also read somewhere that the PAM service name is based on sshd argv[0].

The background is, that this service would be run in a failover cluster and I don't like the idea of having to maintain users in each nodes /etc/passwd file. Therefore I would like to run an sshd with it's own configuration and with a independent account management.

E.g. in vsftpd virtual users can be written into a BDB file which is then passed to

Is something like this possible with standard PAM/OpenSSH?

share|improve this question

Have you considered managing your user accounts with ldap, nis, or a configuration management system instead of maintaining the accounts locally on the cluster nodes?

Do you only require sftp, and not shell access? I see that proftpd now has an sftp module, and it supports an external account database.

share|improve this answer
LDAP is not really an option as it would add more complexity. Same story with proftpd, I hope it can be done with OpenSSH... – zero_r Oct 6 '11 at 21:30

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.