Creating an SFTP user for www server
Creating SFTP Access on Server
Login to server, on which need to create SFTP access
Go to below path and create folder, where need to upload data
• cd /var/www
• mkdir uploads
Copy neal and nagios key’s from Nagios server(nagios.apoyar)
• scp neal nagios username@servername /home/neal/
move both keys to sshkeys folder
• mv neal nagios /usr/share/sshkeys
change nagios owner
• chown nagios:nagios nagios
change permission for neal and nagios
• chmod 600 *
Create simlink and restart sshd
• ln -s /usr/share/sshkeys/nagios /home/nagios/.ssh/authorizedkeys
• ln -s /usr/share/sshkeys/neal /home/neal/.ssh/authorizedkeys
• systemctl restart sshd
Create user apoyarsftp
• useradd -m -d /var/www/uploads/ -G www-data /usr/sbin/nologin apoyarsftp
Add user to www-data group
• usrmod -a -G apoyarsftp www-data
Go to home folder
• cd /home/
• vi /etc/ssh/sshd.config
Go to last & add below lines there
Match User sftpuser
ChrootDirectory folderpath
X11Forwarding no
AllowTcpForwarding no
ForceCommand Internal-sftp
edit username and folderpath
sftpuser – apoyarsftp
folderpath - /var/www/uploads/
save file :wq!
• systemctl restart sshd
Set password for apoyarsftp user
• Passwd apoyarsftp
Qwerty1!
Change owner and permission for uploads folder
• Cd /var/www
• chown -R apoyarsftp apoyarsftp:apoyarsftp uploads/
• chown root:root uploads/
• chmod 755 uploads/
Create .ssh folder under uploads and change owner and permission for .ssh folder
• cd uploads/
• mkdir .ssh
• chmod -R 700 .ssh/
• chown –R apoyarsftp:apoyarsftp .ssh/
Go to below path and generate key
• cd /usr/share/sshkeys
• ssh-keygen
Enter file name - ./apoyarsftp
• mv apoyarsftp /home/neal
• mv apoyarsftp.pub apoyarsftp
Change owner and permission for apoyarsftp
• chown apoyarsftp:apoyarsftp apoysrsftp
• chmod 600 apoyarsftp
Create simlink
• ln –s /usr/share/sshkeys/apoyarsftp /var/www/uploads/.ssh/authorizedkeys
Create subfolder under uploads folder and change owner for that folder
• cd /var/www/uploads
• mkdir private
• chown –R apoyarsftp:apoyarsftp private
Go to mercury.apoyar server and create new host under bleckmann
• Name - sftp
• IP address - Server IP adreess
Click Add host
Go to bleckmann server and add DNS record to hostfile
• cd /home/neal
• vi /etc/hosts
And add below entry
Server IP address sftp.bleckmann.apoyar
Save the file (:wq1!)
Now connect server try uploading files.