I edited /etc/ssh/sshd_config to include: Match User netdriveĬhanged home directory owner and permissions: sudo chown root:root /home/netdrive/ Then edited /etc/passwd and made sure it has /bin/false for the user so the line was: netdrive:x:1001:1004:Net Drive User,:/home/netdrive:/bin/false And here is how I got it working:įirst I created a user: sudo useradd netdrive I wanted to lock the user so that it would not be able to navigate through the whole file system, no ssh login access and I wanted to have write access to the network share.

I spent the whole day trying to get a network share on my raspberry. Here is the ls -h /home output: drwxr-xr-x 26 oli oli 4096 17:19 oli I'm not entirely sure what's going on there, but it suggests something is wrong with the user directory. May 9 14:45:48 nj sshd: pam_unix(sshd:session): session closed for user bob May 9 14:45:48 nj sshd: fatal: bad ownership or modes for chroot directory component '/home/bob/'

Okay so I just had a look at /var/log/auth.log and saw this: May 9 14:45:48 nj sshd: pam_unix(sshd:session): session opened for user bob by (uid=0) What am I doing wrong? How can I limit bob to /home/bob/? I have explicitly tried ChrootDirectory /home/bob but that doesn't work either. I have found that ChrootDirectory /home works, but it still gives them access to any home directory. If I comment out the ChrootDirectory line I can SFTP in but then they have free rein over the server. When I try to log in as them, here's what I see $ sftp password:Ĭouldn't read packet: Connection reset by peer I've also changed the /etc/ssh/sshd_config to include the following: Match Group sftponly Here is their /etc/passwd line: bob:x:1001:1002::/home/bob:/bin/false I've changed their shell to /bin/false to stop SSH logins. I've created a user called bob and added him to a new group called sftponly. I will bind-mount in any files I want them to be able to see. I want to give a client access to my server, but I want to limit those users to their home directories.

Netdrive 3 authentication fails