sftp-server versus internal-sftp

[Markus Friedl]

1) internal-sftp is a hack that was added later for simplifying chroot setups
2) the login-shell is used for access-control in many cases, so skipping
the shell might allow access for locked-out users.

-m


Am 24.12.2013 um 01:07 schrieb Parke <parke.nexus at gmail.com>:

> Hi,
> 
> I recently discovered that my ~/.bashrc file was preventing me from
> using SFTP successfully.  I then found documentation of sftp-server
> and internal-sftp.  However, I could not find answers to the following
> questions in the documentation.
> 
> 1) What are the advantages of sftp-server over internal-sftp?  (I
> believe Ubuntu and Debian both default to "Subsystem sftp
> /usr/lib/openssh/sftp-server".)
> 
> 2) What is the advantage of having the subsystem run sftp-server via
> the user's shell, instead of just running sftp-server directly?
> 
> Thanks!
> 
> -Parke
> _______________________________________________
> openssh-unix-dev mailing list
> openssh-unix-dev at mindrot.org
> https://lists.mindrot.org/mailman/listinfo/openssh-unix-dev