Geek Answers Handbook

Can you have virtual users using an SFTP server?

I had an FTP server (Mac OS X, but not a server version) configured for a while, when users are virtual, that is, they are not actual user accounts in the server OS, but the accounts processed by the FTP server software are in OS they all look like ftp user account. I would like to remove the FTP server software and upgrade to SFTP.

Is there a way to configure SFTP / SSH so that I can create virtual users and at the same time their sandbox?

The reason I want virtual users is that from time to time I add and delete accounts, and doing this with the proper user accounts tends to get messy, and I don’t know how to do this. There are always several files there, and each user has his own directory of users (with a large number of files that are relevant only if they really log on to the computer sitting in front of him), which is quarantined when deleting an account, so you have to manually delete it, etc.

+6
ssh ftp sftp macos
source share
3 answers

Unix's usual generic answer to this is "PAM". If you want a plain old OpenSSH SSHD to handle your SFTP, you need to connect something to the SSHD PAM stack (/etc/pam.d/sshd), which does what you need and does not take into account what you don’t necessary. It can be a universal directory server (possibly LDAP), which maps all of your virtual users to a single home directory and gives them a limited or scoring shell.

If you want to look at FTP servers that can also run FTP-ssl (which is not the same as SFTP), good ftp servers like Pure-ftpd or vsftp will do it. Ssl FTP servers have a simpler virtual user interface.

http://www.bsdguides.org/guides/freebsd/networking/pure-ftpd_virtual_users.php

+4
source share

If you are open to commercial products, VShell Server from Van Dyke software is available on Unix / Linux / Windows, supports virtual users (multiple backends) with SSH and SFTP protocols:

VShell Server

0
source share

JSCAPE SFTP Server is a commercial cross-platform server that does what you want.

http://www.jscape.com/

I know it sounds like I work for them, but I don’t :)

0
source share

More articles:


All Articles