Re: Howto log multiple sftpd instances with their chroot shared via NFS

[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

 



Hi Hildegard,

On 1/10/21 2:44 pm, Hildegard Meier wrote:
mount --bind/var/data/dev/<username>/var/data/chroot/<username>/dev

so/var/data/chroot/<username>/dev is now effectively local on the sftp server, not anymore on nfs mount.

That's not right.  This doesn't magically turn an NFS mount into a local mount.  If /var/data/chroot/<username>/dev is NFS mounted, /var/data/dev/<username> is also NFS mounted.

I believe I explained what you need to do but for some reason you didn't like it, and when I asked why, you never replied.

To repeat myself:

1. Create /var/data/chroot/dev, /var/data/chroot/home and /var/data/chroot/lib on both machines.

2. Configure your syslog daemon to read from /var/data/chroot/dev/log.

3. Configure SSH to chroot for the SFTP users to /var/data/chroot.

4. Mount your current NFS share which contains all 800 user directories over /var/data/chroot/home.

For extra points, instead of step 4, although I think is the bit you didn't like, while at the same time I think is the bit that you said you really want, so there's cognitive dissonance for you:

4. Mount a NFS share which contains empty directories for all 800 users over /var/data/chroot/home.

5. When a user logs in use automount to NSF mount their home directory over /var/data/chroot/home/<username>.

This is not hard.

Regards,

David

_______________________________________________
openssh-unix-dev mailing list
openssh-unix-dev@xxxxxxxxxxx
https://lists.mindrot.org/mailman/listinfo/openssh-unix-dev




[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

[Index of Archives]     [Linux ARM Kernel]     [Linux ARM]     [Linux Omap]     [Fedora ARM]     [IETF Annouce]     [Security]     [Bugtraq]     [Linux]     [Linux OMAP]     [Linux MIPS]     [ECOS]     [Asterisk Internet PBX]     [Linux API]

  Powered by Linux