Allow SFTP but lock down SSH with key only

[CBG]

Hi,

How do I allow SFTP on the SSH port, but also lock down SSH.
So that when logging in to SSH, you need to have the key file, and stop password logins.

Is this possible and if so how?

 

[cPanelMichael]

Hello,

This isn't supported by default through a specific feature, but you may find the workaround referenced on the following third-party URL helpful:

Separate SSH and SFTP

Thank you.

 

[sparek-3]

The feature request:

SFTP access for virtual FTP users

might apply here.

Personally, if it were me, I'd encourage cPanel to provide SFTP support through ProFTPd (or some other FTP daemon that supports SFTP emulation... I'm only aware of ProFTPd). This way you can have a bit more granular control, i.e. run SFTP off of a different port than your SSH service. This can also provide SFTP support for virtual FTP users.

But this feature request seems to have gotten stuck into what I like to call feature request purgatory.