2

I need:

  • An scp and sftp server
  • With chroot-ed environment
  • With non-login (ssh not allowed for scp/sftp users)

Options and related issues I found:

scponly

  • No updates since more than 6 years
  • Does one really need to recompile the whole thing to make changes in the configuration??

rssh

  • It is told to have plenty of security issues
  • No updates since plenty of years
  • The author himself says that "rssh is done. Period"
  • Ubuntu seems to be maintaining it somehow. Unfortunately, I need it for a CentOS server

ssh-server

  • It does the job with sftp and the chroot, but not with sftp
  • Otherwise it seems quite OK

So, I was wondering what other options might be out there, or how does this particular issue get handled by others.

closed as off-topic by yoonix, Ward, Jenny D, Nathan C, mdpc Aug 9 '17 at 23:09

This question appears to be off-topic. The users who voted to close gave this specific reason:

If this question can be reworded to fit the rules in the help center, please edit the question.

  • Software recommendations are off topic for SF. You should ask on Software Recommendations. – Gerald Schneider Jul 31 '17 at 17:32
  • One possibility is ProFTPD's mod_sftp module, which does just what you want (chroot, scp/sftp only, no shell). – Castaglia Jul 31 '17 at 21:24
  • @GeraldSchneider: Thanks. But I posted here because most of the related discussions I found are actually on SF. Plus, I was searching for solutions, not necessarily a software recommendation. – Julen Larrucea Aug 1 '17 at 10:22
  • @Castaglia: I didn't know about ProFTPD. It looks really good! Finally I went with the plain SSH solution for now, but I will definitely consider it. Make it an answer, so that I can upvote. – Julen Larrucea Aug 1 '17 at 10:26
3

I recommend to just use the common chrooted internal-sftp that is included with most OpenSSH servers. SFTP clients are available on all operating systems so I do not see any problems with adoption.

You might also want to refer to this other serverfault question to allow SFTP but not SSH to assist you with your setup.

  • Well... I followed your advice and stuck to the good old OpenSSH server for now. But that ProFTPD mentioned above sounds really good too, and it seems to support scp and plenty of other stuff. – Julen Larrucea Aug 1 '17 at 10:30
2

One possibility is ProFTPD's mod_sftp module, which does just what you want (chroot, SCP/SFTP only, no shell).

Hope this helps!

Not the answer you're looking for? Browse other questions tagged or ask your own question.