Hi,
I am not if I got your question correct but here how my setup is:
FTP access disabled
Running sshd which only supports certificate based auth
I copied my public certificate in my home dir
Now I can do sftp using certificates. So I don't have to type password
(if my certificate was created without password), all transactions are
encrypted. Support scp ssh sftp and for winodws based client used
filezilla with putty.
Is this what you are looking for ?
Thanks
Yogesh
Haim Ashkenazi wrote:
Hi
I want to allow a lot of users to be able to upload/download fies, with the
following restrictions:
1. encrypted (ssh/ssl)
2. key based authentication, no password!!!
3. preferebly without the option for login (if used with scp, sftp)
4. chroot
The obvious way was using sftp, but woody doesn't have 'rssh' and I don't
want to start migrating unstable packages (to build rssh I need a higher
version of ssh then woody has), this is supposed to be a busy production
server. I can't afford bugs, etc...
in the worst case I'll make a chroot enviroment and allow ssh (with logins)
but I was wondering if there's a better way?
thanx
--
Haim