Re: openssh: Enabling sftp, but disabling ssh?

2006-09-07 Thread Darren Tucker
Benjamin Donnachie wrote: Mark Holden wrote: Does anybody know if it's possible, using openssh, to allow file transfer to/from a machine, using sftp, for a specific userid, and disallow ssh login/remote command execution for that same userid? Other userids on the machine should be unaffected.

Re: openssh: Enabling sftp, but disabling ssh?

2006-09-07 Thread Derek Martin
On Tue, Sep 05, 2006 at 12:04:07PM -0500, Mark Holden wrote: I forgot to mention that we're using RHEL AS3 (currently at update 8) and RHEL AS4 (currently at update 4). Does scponly support these distributions? rssh does. From a quick read of the scponly web page: - it seems to indiate

RE: openssh: Enabling sftp, but disabling ssh?

2006-09-06 Thread Tevfik Karagülle
Morris [mailto:[EMAIL PROTECTED] Sent: Tuesday, September 05, 2006 6:46 PM To: 'Mark Holden'; secureshell@securityfocus.com Subject: RE: openssh: Enabling sftp, but disabling ssh? Does anybody know if it's possible, using openssh, to allow file transfer to/from a machine, using sftp

RE: openssh: Enabling sftp, but disabling ssh?

2006-09-06 Thread Mark Holden
- From: Benjamin Donnachie [mailto:[EMAIL PROTECTED] Sent: Tuesday, September 05, 2006 11:53 AM To: secureshell@securityfocus.com Cc: Holden, Mark (RICH1:B670) Subject: Re: openssh: Enabling sftp, but disabling ssh? Mark Holden wrote: Does anybody know if it's possible, using openssh, to allow

Re: openssh: Enabling sftp, but disabling ssh?

2006-09-06 Thread Benjamin Donnachie
Mark Holden wrote: Does anybody know if it's possible, using openssh, to allow file transfer to/from a machine, using sftp, for a specific userid, and disallow ssh login/remote command execution for that same userid? Other userids on the machine should be unaffected. I do exactly that on my

Re: openssh: Enabling sftp, but disabling ssh?

2006-09-06 Thread Benjamin Donnachie
Mark Holden wrote: I forgot to mention that we're using RHEL AS3 (currently at update 8) and RHEL AS4 (currently at update 4). Does scponly support these distributions? It should do - I've used it on a number of Redhat-like distros. From a quick read of the scponly web page: - it seems to

Re: openssh: Enabling sftp, but disabling ssh?

2006-09-06 Thread Jan Metzger
Hi, I came across something which could be the solution for your problem in the subversion manual, see http://svnbook.red-bean.com/nightly/en/svn.serverconfig.svnserve.html#svn.serverconfig.svnserve.sshtricks they basically use the authorized keys file for a single user to authenticate

RE: openssh: Enabling sftp, but disabling ssh?

2006-09-05 Thread Patrick Morris
Does anybody know if it's possible, using openssh, to allow file transfer to/from a machine, using sftp, for a specific userid, and disallow ssh login/remote command execution for that same userid? Other userids on the machine should be unaffected. You should be able to set the user to an