I have a liitle problem.

I need a sshd configuration to chroot (internal sftp) every user
excluding admin (which should have a shell access).

So i made:

ChrootDirectory /var/www/users/%u
ForceCommand internal-sftp
X11Forwarding no
AllowTcpForwarding no

Match User admin
    ChrootDirectory none
    ForceCommand no

I also tried to set ForceCommand to SSH_ORIGINAL_COMMAND or none or true
or leave emty. Doesn't work.

I also try different configuration:

Match User !admin
        ChrootDirectory /var/www/users/%u
        ForceCommand internal-sftp
        X11Forwarding no
        AllowTcpForwarding no

but it doesnt work too.

I don't want to set special group (ex. sftopnly) for users.
Is there a better way ?

Thanks,
Bambero

Reply via email to