Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 9 Dec 2010 12:55:06 +0100
From:      Redd Vinylene <reddvinylene@gmail.com>
To:        krad <kraduk@gmail.com>
Cc:        joseph.bashe@gmail.com, questions <questions@freebsd.org>, Chris Brennan <xaero@xaerolimit.net>
Subject:   Re: FTPD not working properly on jail
Message-ID:  <AANLkTikVRn4LuAQw_n_tqD4tRO%2BcTrwQZk0e_G2Pb9q_@mail.gmail.com>
In-Reply-To: <AANLkTim8Tk1meZ1SvZUZGaF%2BPcVsauXR8bEg1U8Dt3ih@mail.gmail.com>
References:  <AANLkTimWJn3SDLpOWCFw3pDByfutuLiNTgbmWFfFkMJg@mail.gmail.com> <20101208155125.E6126@maildrop.int.zabbadoz.net> <AANLkTi=fc_gO%2B3KMjrjXiX2TATQS=-qA2r%2B9r11SYMag@mail.gmail.com> <20101208163047.S6126@maildrop.int.zabbadoz.net> <AANLkTi=qASzkAofrBtshSx6158eYpZV8kmF2dyouS8Un@mail.gmail.com> <AANLkTin4v8SFP_d2VJ7%2Bd5Ryz-Z6Zp4D9VRswkqjaiAx@mail.gmail.com> <AANLkTinYYCF=07zDhxGZyX-JY5=AhmjTSx_E4Jp0SQgC@mail.gmail.com> <AANLkTinQWCorCkMT98gSExW8OB=gVuJnT7Ei44fEdzOj@mail.gmail.com> <1865384339-1291839108-cardhu_decombobulator_blackberry.rim.net-1153938124-@bda947.bisx.prod.on.blackberry> <AANLkTim8Tk1meZ1SvZUZGaF%2BPcVsauXR8bEg1U8Dt3ih@mail.gmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, Dec 8, 2010 at 11:24 PM, krad <kraduk@gmail.com> wrote:

>
>
> On 8 December 2010 20:07, Joseph Bashe <joseph.bashe@gmail.com> wrote:
>
>> But he mentioned he needs some sort of 'virtual' (I'm assuming chroot)
>> feature; this is not possible with sftp afaik.
>> .
>>
>
>
> Its totally possble to chroot the sftp, and I have done it several times.
> Something like the below will isolate each user
>
> Match Group sftponly
>          ChrootDirectory /home/chroot/%u
>
>          X11Forwarding no
>          AllowTcpForwarding no
>          ForceCommand internal-sftp
>
>
> he might need something more like this so they can share data
>
> Match Group sftponly
>
>          ChrootDirectory /home/chroot/
>          X11Forwarding no
>          AllowTcpForwarding no
>          ForceCommand internal-sftp
>
>
>
I would love to try that sometime - but right now I have to get this regular
ftp working.

Just to recap - I'm trying to set up a virtual vsftpd-ssl-2.3.2 server so my
band can share new tracks, production material and what not, but my SSL
certificate keeps messing it up: http://pastie.org/1358536 - anybody know
why? It works just fine when I disable the SSL.

Many thanks!



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?AANLkTikVRn4LuAQw_n_tqD4tRO%2BcTrwQZk0e_G2Pb9q_>