Topic: Loch user in home directory

[Magnus]

Is there a way to lock the user in hes home directory.
Got few that got ssh access and i want them locked in there acconts.
No access to the rest of the server.

Thanx

[Beaker]

yeah I am also interested in this

[Craig]

This is not possible as far as I know.

The whole idea of telnet was that you could control the remote computer as if you were sat in font of it.  When your sat in front of the computer you can generally 'wander' all over the system and have look around, permissions allowing.

Ssh works for most people the same as telnet but any data transmitted is encrypted.

On most unix systems that I know you can look at quite a few config files (such as those in /etc) but you can't edit them.

A normal user needs to be able to read and see quite a lot of files to actually be able to run, trying to keep them in their home directory will actuallt stop them doing any work.

----
P.S. These are my own comments and while I think they are accurate they may not be.  Any one care to comment?

[lt]

in interested more from an ftp point of view lock users in thier home directory

[Michiel]

If I understand you correctly, you want to chroot ssh access for your users. Google the internet for "chroot ssh" and you'll find several how-tos.

[Michiel]

lt wrote:
>
> in interested more from an ftp point of view lock users in
> thier home directory

Fot that there is a contrib. Search contribs.org for "ftp".

[Craig]

It turns out that I was correct, yet wrong!

In the standard version of openssh you can't lock users to their home directory.  But there is a project (http://chrootssh.sourceforge.net/) which has a patch to openssh, this does allow you to lock users.


I live and learn!

[vj]

hmm..sounds very interesting, Craig
do you know if anyone has tried it on the sme?

vj

[Craig]

vj,
Don't know, I've not heard any think which is why I game my inital impressions.

Craig

[Nathan Fowler]

While this may not be what you are actively looking for, this may still be useful:

http://www.sublimation.org/scponly/

[Trevor]

Anyone know how to install the http://chrootssh.sourceforge.net/ patch successfully on SME 6.0b3?

Assuming the use of
http://chrootssh.sourceforge.net/download/openssh-3.7p1-chroot.tar.gz

If you has done this or know how, please share! Thanks!

[Trevor]

Anybody???