I've got a CentOs release 6.4 with Digital Ocean and would like to successfully create SFTP users and jail them to the user's own chroot home directory but I fear I'm making a mess of this.
I've tried a lot of things, far too many to list here really as most is probably incorrect or won't make much sense but what I feel should be the correct process and what I have tried is:-
Create a group for
Create a user and set their home directory:-
useradd -d /var/www/vhosts/domain.com dummyuser
Set a password for the user:-
Change the user's group to 'sftp':-
usermod -g sftp dummyuser
Set the user's shell to
usermod -s /bin/false dummyuser
Edit Subsystem in
#Subsystem sftp /usr/lib/openssh/sftp-server Subsystem sftp internal-sftp
Add the following to the bottom of the
Match group sftp X11Forwarding no ChrootDirectory %h AllowTcpForwarding no ForceCommand internal-sftp
I make sure all the following directories are
/var /var/www /var/www/vhosts /var/www/vhosts/domain.com
If I then try to log in to the server via SFTP with the user
dummyuser (in WinSCP), I get the following:-
Authentication log (see session log for details): Using username "dummyuser". Authentication failed.
All I want to achieve is jailing a user to their home directory. I've also got vsftpd set up and configured. Users could log in fine but would have access to the entire server - I just haven't managed to get jailing to work at all.
Forgot to mention, I then restarted
service sshd restart
When the error is produced in WinSCP, their help page on this is here.
I replaced the actual server name with
Apr 28 14:20:56 server_name sshd: Accepted password for dummyuser from 220.127.116.11 port 44402 ssh2 Apr 28 14:20:56 server_name sshd: pam_unix(sshd:session): session opened for user dummyuser by (uid=0) Apr 28 14:20:56 server_name sshd: fatal: bad ownership or modes for chroot directory component "/var/www/vhosts/" Apr 28 14:20:56 server_name sshd: pam_unix(sshd:session): session closed for user dummyuser