Results 1 to 7 of 7

Thread: sftp not working with shell access disabled

  1. #1
    Member
    Join Date
    Feb 2003
    Posts
    37

    Default sftp not working with shell access disabled

    Anyone else notice that when an account doesn't have shell access enabled that sftp is broken. This is the latest stable version 9.1.0-STABLE_93.

    Users are getting as far as the password prompt and it just rejects the password. Enable jailshell for the account and it starts working.

    Anyone know of another solution besides handing out shell access to everyone?

    Tks!

  2. #2
    Super Moderator This forum account has been confirmed by cPanel staff to represent a vendor. chirpy's Avatar
    Join Date
    Jun 2002
    Location
    Go on, have a guess
    Posts
    13,496

    Default

    You cannot have SFTP without shell access, because the sftpserver is not launched until after a successful login via shell.

    The alternative is to use FTP over SSL which works fine with cPanel and proFTPd, unless you have a firewall installed, then that won't work due to a "feature" in the protocol.
    Jonathan Michaelson

    Need your cPanel servers secured and tuned?
    cPanel Server Configuration, Security, Recovery and Antivirus/AntiSpam Services
    Developers of the most effective (and free) Firewall & Security Solution for cPanel Servers - csf
    http://www.configserver.com

  3. #3
    cPanel Partner NOC cPanel Partner NOC Badge
    Join Date
    Jun 2003
    Posts
    647

    Default

    Originally posted by chirpy
    You cannot have SFTP without shell access, because the sftpserver is not launched until after a successful login via shell.

    The alternative is to use FTP over SSL which works fine with cPanel and proFTPd, unless you have a firewall installed, then that won't work due to a "feature" in the protocol.

    Actually, there is a method...I've detailed it at :

    http://www.cpanelfaq.org/004/104.html

    (I don't believe in saying things over and over. :P)

    I've used it for awhile and never had any problems with it, however I only discovered it after someone suggested i to me and I could never find out if it was an "official method" or not.

  4. #4
    Super Moderator This forum account has been confirmed by cPanel staff to represent a vendor. chirpy's Avatar
    Join Date
    Jun 2002
    Location
    Go on, have a guess
    Posts
    13,496

    Default

    Actually, there is a method...I've detailed it at
    Cool , although looking at the method, it does feel like cheating

    I wonder if there are any security implications of doing this? It might be a good idea to run it past the people over at openssh.org
    Jonathan Michaelson

    Need your cPanel servers secured and tuned?
    cPanel Server Configuration, Security, Recovery and Antivirus/AntiSpam Services
    Developers of the most effective (and free) Firewall & Security Solution for cPanel Servers - csf
    http://www.configserver.com

  5. #5
    Member
    Join Date
    May 2004
    Posts
    17

    Default

    page is gone.. anyone have the info to share or the new link?

  6. #6
    Member sawbuck's Avatar
    Join Date
    Jan 2004
    Posts
    1,342
    cPanel/WHM Access Level

    Root Administrator

  7. #7
    Member
    Join Date
    May 2004
    Posts
    17

    Default

    thank you sawbuck!

Similar Threads

  1. Allow SFTP without Shell?
    By Selena in forum New User Questions
    Replies: 34
    Last Post: Today, 09:44 AM
  2. User can manage shell access but it's disabled?
    By khorinis in forum Security
    Replies: 4
    Last Post: 12-22-2010, 10:07 PM
  3. Can I allow SFTP without Shell?
    By BraveX in forum cPanel & WHM Discussions
    Replies: 3
    Last Post: 02-23-2009, 12:32 PM
  4. SFTP when password authentication is disabled
    By meeven in forum cPanel & WHM Discussions
    Replies: 3
    Last Post: 10-06-2008, 01:09 PM
  5. Shell Access Disable Not Working
    By maverick in forum cPanel & WHM Discussions
    Replies: 0
    Last Post: 03-21-2003, 11:59 PM