Otdfbt

I have a website in my VPS. I install Debian 7 on that VPS. My http document is located in directory /var/www/example.com I installed Nginx on that server and directory /var/www/example.com is owned by user www-data and group www-data. I want to add non root user (let's name it someone) to be able to download or upload documents onto that directory through FTP or SFTP client like FileZilla.

I found this and this guide explaining it can be done using chroot. I try to configure it but it didn't work. Here's some command that I used so far.

1. useradd someone


2. groupadd sftpusers


3. usermod -G sftpusers someone


4. vi /etc/ssh/sshd_config

I added this code

#Subsystem sftp /usr/lib/openssh/sftp-server
Subsystem sftp internal-sftp

And at the end of file I added

Match group sftpusers
 ChrootDirectory /var/www/example.com
 X11Forwarding no
 AllowTcpForwarding no
 ForceCommand internal-sftp

5. service ssh restart

But when I conected through FileZilla, it gave me error. I suspect this error due to /var/www/example.com is owned by user www-data and group www-data.

Question: How to enable non root user to be able to download or upload document onto /var/www/example.com directory through FTP or SFTP client like FileZilla. This non root user should not be able to access parent directory like /var/www/

Alright, after trial and error, it seems here's the answer.

1. adduser someone


2. 
   

   vi /etc/ssh/sshd_config
   I am using Froggiz's configuration, so my code looks like this:

   
   
   

   PasswordAuthentication yes 
   
   Subsystem sftp internal-sftp -u 0007 -f AUTH -l VERBOSE 
    Match Group someone
    ChrootDirectory /var/www
    ForceCommand internal-sftp -u 0007
    AllowTcpForwarding no
    GatewayPorts no
    X11Forwarding no
   

   
   



3. service ssh restart



4. 
   chmod -R 777 /var/www/example.com . This will enable someone to upload/download file and allow webserver/php to process files in this directory.

this is how i set my sftp for specific user

1] create a user

 adduser USER

2] edit /etc/ssh/sshd_config

 PasswordAuthentication yes 

 Subsystem sftp
 internal-sftp -u 0007 -f AUTH -l VERBOSE 
 Match Group USER
 ChrootDirectory FOLDER
 ForceCommand internal-sftp -u 0007
 AllowTcpForwarding no
 GatewayPorts no
 X11Forwarding no

3] set rights for the user

 chmod -R 777 FOLDER

4] restart ssh

service ssh restart

replace USER by your user
and FOLDER by your folder
and it should works ! ;)