I maintain an sftp server for a small company with a bunch of not-very-technical clients.their home directory under the chroot. If they immediately upload the file, (instead of cd'ing), the file name is logged with just the filename, which might not relate to the client name.
We've implemented chroot'ed sftp basically following the advise from https://www.the-art-of-web.com/system/sftp-logging-chroot/.
With scores of accounts, we've gone with a single chroot for all users, and rely on the file system permissions to keep them from seeing each others uploads. They share a group (which triggers the force command to sftp). When they connect, it is to
What I'm thinking about is something like SftpInternalLogPrefix that would accept some of the already-existing tokens.
How does one post to this Group?their home directory under the chroot. If they immediately upload the file, (instead of cd'ing), the file name is logged with just the filename, which might not relate to the client name.
On Tuesday, July 11, 2023 at 12:59:35 PM UTC-5, Nathan Zook wrote:
I maintain an sftp server for a small company with a bunch of not-very-technical clients.
We've implemented chroot'ed sftp basically following the advise from https://www.the-art-of-web.com/system/sftp-logging-chroot/.
With scores of accounts, we've gone with a single chroot for all users, and rely on the file system permissions to keep them from seeing each others uploads. They share a group (which triggers the force command to sftp). When they connect, it is to
What I'm thinking about is something like SftpInternalLogPrefix that would accept some of the already-existing tokens.
| Sysop: | Keyop |
|---|---|
| Location: | Huddersfield, West Yorkshire, UK |
| Users: | 715 |
| Nodes: | 16 (2 / 14) |
| Uptime: | 152:39:00 |
| Calls: | 12,091 |
| Calls today: | 4 |
| Files: | 15,000 |
| Messages: | 6,517,648 |