sftp user account

[hirokomatsui]

Hi Paul,

Is it easy to create a user account which can access only to the home directory? We want our collaborator uploading some files on our cluster. If it's not easy, never mind. I'll just can create a regular user account for a short time.

[tatarsky]

Different than frazerguest1 ?

We can do another of these if you wish. Just advise the username and the homedir! But we have that active. I do not recall the password ;)

# Support Upload
Match User frazerguest1
    ChrootDirectory /frazer01/home/sftp
    AllowTCPForwarding no
    X11Forwarding no
    ForceCommand internal-sftp

[tatarsky]

And we might have to check iptables as I believe we blocked ssh to campus awhile back. I'll look in the morning but just advise on re-use of frazerguest1 or not.

[hirokomatsui]

Can you remove the user frazerguest1, as well as the home directory too. I've checked the files there.

The new user's on UCSD campus, so no need to change iptables. The user name will be gaulton.

[hirokomatsui]

The password can be any random strings.

[tatarsky]

OK. Making a chroot sftp account called "gaulton" with a random password which I'll send to you and a homedir of the same name.

And removing the older frazerguest1 config.

[tatarsky]

Sent you an email with items provided! Advise if issues and note carefully the need to cd upload in the sftp as sshd chroot permissions got a little more strict.

I'll do the same config on fl-hn2 if you want. Right now its just fl-hn1.

[tatarsky]

Did the same on fl-hn2.

[tatarsky]

frazerguest1 removed. homedir removed.

[hirokomatsui]

I've confirmed that works. Thanks!

[tatarsky]

Excellent! You are very welcome. Have a great weekend.