Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!

Allow SFTP but lock down SSH with key only

Discussion in 'Security' started by CBG, Dec 20, 2017.

Tags:
  1. CBG

    CBG Active Member

    Joined:
    Apr 23, 2010
    Messages:
    36
    Likes Received:
    1
    Trophy Points:
    58
    cPanel Access Level:
    Root Administrator
    Hi,

    How do I allow SFTP on the SSH port, but also lock down SSH.
    So that when logging in to SSH, you need to have the key file, and stop password logins.

    Is this possible and if so how?
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #1 CBG, Dec 20, 2017
  2. cPanelMichael

    cPanelMichael Technical Support Community Manager
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    45,442
    Likes Received:
    1,961
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Twitter:
    Hello,

    This isn't supported by default through a specific feature, but you may find the workaround referenced on the following third-party URL helpful:

    Separate SSH and SFTP

    Thank you.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #2 cPanelMichael, Dec 20, 2017
    CBG likes this.
  3. sparek-3

    sparek-3 Well-Known Member

    Joined:
    Aug 10, 2002
    Messages:
    1,799
    Likes Received:
    131
    Trophy Points:
    343
    cPanel Access Level:
    Root Administrator
    The feature request:

    SFTP access for virtual FTP users

    might apply here.

    Personally, if it were me, I'd encourage cPanel to provide SFTP support through ProFTPd (or some other FTP daemon that supports SFTP emulation... I'm only aware of ProFTPd). This way you can have a bit more granular control, i.e. run SFTP off of a different port than your SSH service. This can also provide SFTP support for virtual FTP users.

    But this feature request seems to have gotten stuck into what I like to call feature request purgatory.
     
    #3 sparek-3, Dec 20, 2017
(You must log in or sign up to post here.)
Loading...
Similar Threads - Allow SFTP lock
  1. MH-Stefan

    Unable to enable allow_url_fopen and allow_url_include

    MH-Stefan, Nov 20, 2018, in forum: EasyApache
    Replies:
    4
    Views:
    263
    cPanelMichael
    Nov 27, 2018
  2. Sunlander

    Hide files from view in ftp but still allow scripts to process content

    Sunlander, Nov 19, 2018, in forum: General Discussion
    Replies:
    2
    Views:
    111
    Sunlander
    Nov 24, 2018
  3. mvandemar

    Free hostname certs are not allowed by this partner error

    mvandemar, Nov 9, 2018, in forum: Security
    Replies:
    2
    Views:
    103
    cPanelLauren
    Nov 12, 2018
  4. ottdev

    Does letsencrypt allow manually signing external domains?

    ottdev, Oct 29, 2018, in forum: Security
    Replies:
    2
    Views:
    114
    ottdev
    Oct 29, 2018
  5. Gino Viroli

    Allow Remote Domains - why is it a security problem?

    Gino Viroli, Oct 25, 2018, in forum: Bind/DNS/Nameserver
    Replies:
    2
    Views:
    304
    LucasRolff
    Oct 27, 2018

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...
    Dismiss Notice