Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Is it possible to setup a SFTP service with OpenSSH with the use of virtual users (not /etc/passwd)? I'm aware of all the chroot/jail capabilities of OpenSSH. I also read somewhere that the PAM service name is based on sshd argv[0].

The background is, that this service would be run in a failover cluster and I don't like the idea of having to maintain users in each nodes /etc/passwd file. Therefore I would like to run an sshd with it's own configuration and with a independent account management.

E.g. in vsftpd virtual users can be written into a BDB file which is then passed to pam_userdb.so.

Is something like this possible with standard PAM/OpenSSH?

share|improve this question

1 Answer 1

Have you considered managing your user accounts with ldap, nis, or a configuration management system instead of maintaining the accounts locally on the cluster nodes?

Do you only require sftp, and not shell access? I see that proftpd now has an sftp module, and it supports an external account database.

share|improve this answer
    
LDAP is not really an option as it would add more complexity. Same story with proftpd, I hope it can be done with OpenSSH... –  zero_r Oct 6 '11 at 21:30

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.