Thread: set access restrictions for SFTP authenticated via LDAP

hey ho!

try set ubuntu based sftp server,
allows users existing in ldap
read/write access directories
depending on membership of ldap groups.

e.g. uid=john member of cn=admin
should have full access /ftp
uid=jane, member of cn=team
should have read access /ftp/something
none should able read/write or list outside of /ftp


managed set openssh allow sftp-access read / users can authenticate via ldap. find nothing allow me restrict access.
chroot-jail seems work users existing locally being member of group. none of ldap-users exist locally, seems no option.

or ideas appreciated!

vilwarin

if ldap users honored on system, should able set access restrictions want.
system list ldap users if hit

code:

getent passwd # list users    id <an-ldap-user> # info of particular user

Forum The Ubuntu Forum Community Ubuntu Specialised Support Ubuntu Servers, Cloud and Juju Server Platforms [SOLVED] set access restrictions for SFTP authenticated via LDAP

Ubuntu