internal-sftp only without ssh and scp hanging

[Aris Adamantiadis]

Hello, I suggest

Subsystem       sftp    internal-sftp
Match group sftpusers
          ChrootDirectory /chroot/%u
          X11Forwarding no
          AllowTcpForwarding no
	ForceCommand "echo no external login allowed"
	Subsystem sftp internal-sftp

Since I don't see an obvious way of denying a request-shell or a
request-exec query. I'm not 100% sure it's going to work.
Don't forget AllowTcpForwarding no if this is relevant.

Aris

Paul Surgeon a écrit :
> I've configured OpenSSH_5.3p1 to only allow sftp connections (openssh
> chroot functionality).
> 
> i.e.
> Subsystem       sftp    internal-sftp
> Match group sftpusers
>          ChrootDirectory /chroot/%u
>          X11Forwarding no
>          AllowTcpForwarding no
>          ForceCommand internal-sftp
> 
> So far everything works correctly with sftp but when a user ssh's or
> scp's to the box the login hangs after authentication.
> Is there anyway to get sshd to close the connection instead of just hanging?
> 
> My question is the same as this post which was never answered:
> http://marc.info/?l=openssh-unix-dev&m=124492525712723&w=2
> 
> Thanks
> _______________________________________________
> openssh-unix-dev mailing list
> openssh-unix-dev at mindrot.org
> https://lists.mindrot.org/mailman/listinfo/openssh-unix-dev
>