[scponly] What's needed to make sftp work?

[Paul.Hyder at noaa.gov]

This message indicates that scponly doesn't recognize
the sftp server as a permitted command.  Something
isn't configured correctly.

What options were used with configure?  What OS
platform is the scponly server host?

What command is being used to connect to the scponly
host. (e.g. "sftp host" or Winscp?)
   Paul Hyder
   NOAA Earth System Research Laboratory, Global Systems Division
   Boulder, CO

----- Original Message -----
From: Whit Blauvelt <whit at transpect.com>
Date: Thursday, February 16, 2006 2:30 pm
Subject: [scponly] What's needed to make sftp work?

> Okay, something's missing from the docs. A reasonably default 
> installationdoes not work for sftp:
> 
> Feb 16 16:06:01 china sshd[7563]: Accepted keyboard-interactive/pam 
> for joann from 12.12.12.12 port 41683 ssh2
> Feb 16 16:06:01 china sshd(pam_unix)[7578]: session opened for user 
> joann by (uid=0)
> Feb 16 16:06:01 china sshd[7578]: subsystem request for sftp
> Feb 16 16:06:01 china scponly[7579]: 3 arguments in total.
> Feb 16 16:06:01 china scponly[7579]: ^Iarg 0 is scponly
> Feb 16 16:06:01 china scponly[7579]: ^Iarg 1 is -c
> Feb 16 16:06:01 china scponly[7579]: ^Iarg 2 is /usr/lib/misc/sftp-
> serverFeb 16 16:06:01 china scponly[7579]: opened log at 
> LOG_AUTHPRIV, opts 0x00000029
> Feb 16 16:06:01 china scponly[7579]: retrieved home directory of 
> "/web/howard" for user "joann"
> Feb 16 16:06:01 china scponly[7579]: setting uid to 1015
> Feb 16 16:06:01 china scponly[7579]: processing request: 
> "/usr/lib/misc/sftp-server"
> Feb 16 16:06:01 china scponly[7579]: denied request: 
> /usr/lib/misc/sftp-server (resolved to: sftp-server) ...
> Feb 16 16:06:01 china sshd(pam_unix)[7578]: session closed for user 
> joann
> Now, I'm imagining that there's someplace that should be obvious that
> scponly's looking up what requests it should allow. But that place 
> is not
> described (or I'm missing it) in the man page, the INSTALL, or the 
> README.
> On a normal sftp connection, sftp-server runs fine:
> 
> 8414 ?        Ss     0:00 /usr/lib/misc/sftp-server
> 
> Whit
> 
> _______________________________________________
> scponly mailing list
> scponly at lists.ccs.neu.edu
> https://lists.ccs.neu.edu/bin/listinfo/scponly
>