RE: [Jail-main] Jail-main +apache +sftp and howto (newbie)

[Juan M. C. <as...@er...>]

>Hello all,

	Hello

>
>Just happened to stumble across Jail-main in my search for 
>chroot options for sftp access to my webserver.
>Here is what I am doing and what I want to do.
>
>I am running a webserver, Apache 2.0.48, and am going to be 
>hosting a variety of different websites via Virtual Name 
>hosting. What I want to do is be able to give client 
>read/write access to only their website directories top-level, 
>and all folders below, to allow them to update their pages 
>remotely. I do not want them to be able to access any other 
>part of the filesystem or be able to execute any commands 
>other than those necessary for the operation of sftp.

>I am very new to secure logins and the idea of chrotting an 
>ssh session, however, after much reading I am thinking that 
>Jail-main may be the solution I am looking for.

>My biggest question is about installation. Is it possible for 
>me to only give them access to the sftp server. They will not 
>be logging in as users of the system in anyway, only to upload 
>and download to their directories

	I poke arround with sftp and ssh and sftp requires a valid
	login shell in order to work, so you can't allow sftp without
	ssh session. But in the other side, I get ftp working without
	ssh account, that maybe fits inside your needs.

>I apologize if this question is off-topic or anything else. I 
>have just had too many experiences of installing the wrong software

	it is not offtopic!
	Your questions are always welcome 

>Thank you
>md_kelly

Kind Regards,
Juan M. Casillas
http://www.jmcresearch.com