SFTP deployment configuration

sftp：

SFTP(SSH File transfer protocol ) It's a network protocol , File transfer and operation functions can be provided through any reliable data stream . It is usually with SSH-2 agreement (TCP port 22) Used together to provide secure file transfer ,

Deployment configuration ：

1、 Create user group sftp
groupadd sftp

2、 Create user xinxin02
useradd -G sftp -s /sbin/nologin -d /data/sftp/test

3、 Create a password
passwd test

4、 Modify the configuration file sshd_config
vim /etc/ssh/sshd_config

Comment the following line
#Subsystem sftp /usr/libexec/openssh/sftp-server

Then add in the last line :

Subsystem sftp internal-sftp Use internally provided sftp service
Match Group sftp To configure sftp Group users
ChrootDirectory /data/sftp/%u Restrict users
X11Forwarding no Remote graphical display is local
AllowTcpForwarding no
#ChrootDirectory %h It can be used %h Represents the user's home directory %u On behalf of user name
ForceCommand internal-sftp

systemctl restart sshd

5、 Set directory permissions
chown root:sftp /data/sftp/test
chgrp -R sftp /data/sftp/test
chmod -R 755 /data/sftp/test

# Set the directory that users can upload , Under this user, users are allowed to upload, delete and modify files and folders

Match user sftpuser2
ForceCommand internal-sftp
ChrootDirectory /data/wwwroot/user2/ Repeat three lines for multiple users