linux sftp生成公钥,linux – sftp chroot目录下的公钥授权

我尝试了这个解决方案(将AuthorizedKeysFile放入Match块)和sshd -T抱怨：

/etc/ssh/sshd_config line 153: Directive 'AuthorizedKeysFile' is not allowed within a Match block

(RHEL 6.6,openssh 5.3p1-104)

SOLUTION：authorized_keys文件(和用户的.ssh目录)必须存在于/ etc / passwd定义的主目录位置,在chroot目录之外.

例如(使用OP用户名/ uids)：

/ etc / passwd中：

backup:x:1002:1003::/home/backup:/sbin/nologin

创建由root拥有的目录/ home / backup

创建目录/home/backup/.ssh,将所有权更改为备份,chmod 700 /home/backup/.ssh

将authorized_keys文件复制到/home/backup/.ssh,chmod 400 authorized_keys

ls -laR /home

/home:

total 12

drwxr-xr-x 3 root root 4096 Jul 9 12:25 .

drwxr-xr-x 3 root root 4096 Sep 22 2014 ..

drwxr-xr-x 3 root root 4096 Jul 9 12:25 backup

/home/backup:

total 12

drwxr-xr-x 3 root root 4096 Jul 9 12:25 .

drwxr-xr-x 3 root root 4096 Jul 9 12:25 ..

drwx------ 3 backup sftpusers 4096 Jul 9 12:28 .ssh

/home/backup/.ssh:

total 12

drwx------ 3 backup sftpusers 4096 Jul 9 12:28 .

drwxr-xr-x 3 root root 4096 Jul 9 12:25 ..

-r-------- 3 backup sftpusers 391 Jul 9 12:29 authorized_keys

/ etc / ssh / sshd_config变为：

Match Group sftpusers

ChrootDirectory /sftp/%u

ForceCommand internal-sftp

AllowTcpForwarding no

X11Forwarding no

chroot目录结构是：

ls -laR /sftp/

/sftp/:

total 12

drwxr-xr-x 3 root root 4096 May 3 16:55 .

drwxr-xr-x 23 root root 4096 May 3 14:46 ..

drwxr-xr-x 3 root root 4096 May 3 16:45 backup

/sftp/backup:

total 12

drwxr-xr-x 3 root root 4096 May 3 16:45 .

drwxr-xr-x 3 root root 4096 May 3 16:55 ..

drwxr-xr-x 3 backup sftpusers 4096 May 3 16:55 incoming

drwxr-xr-x 3 root root 4096 May 3 16:55 home

/sftp/backup/incoming:

total 12

drwxr-xr-x 3 backup sftpusers 4096 May 3 16:55 .

drwxr-xr-x 3 root root 4096 May 3 16:45 ..

/sftp/backup/home:

total 12

drwxr-xr-x 3 root root 4096 May 3 16:55 .

drwxr-xr-x 3 root root 4096 May 3 16:45 ..

drwx------ 2 backup sftpusers 4096 May 3 21:06 backup

/sftp/backup/home/backup:

total 12

drwx------ 3 backup sftpusers 4096 May 3 21:06 .

drwxr-xr-x 3 root root 4096 May 3 16:55 ..

注意：/ sftp / backup / home / backup是空的,它只提供一个看起来像非chroot / home / backup的路径 – .ssh目录是/home/backup/.ssh not / sftp /备份/家庭/备份/的.ssh