Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

windows support for SFTP only server #757

Closed
bagajjal opened this issue Jun 5, 2017 · 0 comments
Closed

windows support for SFTP only server #757

bagajjal opened this issue Jun 5, 2017 · 0 comments
Assignees
Milestone

Comments

@bagajjal
Copy link
Collaborator

bagajjal commented Jun 5, 2017

Having
"ForceCommand internal-sftp" in sshd_config will make the server to accept sftp connections only.

Fix details:
In windows, INTERNAL_SFTP is supported via sftp-server.exe.

This is a deviation from the UNIX implementation that hosts sftp-server within sshd.
If sftp-server were to be hosted within sshd for Windows, following would be needed

  • Impersonate client user
  • call sftp-server-main

SSHD service account would need impersonate privilege to impersonate client user, thereby needing elevation of SSHD account privileges
Apart from slight performance gain (by hosting sftp in process), there isn't a clear gain with this option over using and spawning sftp-server.exe.
Hence going with the later option.

@bagajjal bagajjal self-assigned this Jun 5, 2017
@bagajjal bagajjal added this to the June-Mid milestone Jun 5, 2017
@manojampalam manojampalam changed the title "ForceCommand internal-sftp" is not working Support SFTP only server Jun 7, 2017
@manojampalam manojampalam changed the title Support SFTP only server ForceCommand internal-sftp" is not working Jun 7, 2017
@bagajjal bagajjal changed the title ForceCommand internal-sftp" is not working windows support for sftp only server Jun 7, 2017
@bagajjal bagajjal changed the title windows support for sftp only server windows support for SFTP only server Jun 7, 2017
manojampalam pushed a commit to PowerShell/openssh-portable that referenced this issue Jun 8, 2017
@bagajjal bagajjal closed this as completed Jun 9, 2017
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant