SFTP

Introduction

The SFTP (SSH File Transfer Protocol) service allows filesystem access from SFTP clients. Anonymous logins are not allowed, users must authenticate with whichever name service is configured in Services.

Properties

• As of the 2011.1 software release, key management for SFTP has changed to increase security. When creating an SFTP key, it is required to include the "user" property with a valid user assignment. SFTP keys are grouped by user and are authenticated via SFTP with the user's name. It is recommended to recreate any existing SFTP keys that do not include the user property, even though they will still authenticate.

Changing services properties is documented in the BUI and CLI sections of Services. The CLI property names are shorter versions of those listed above.

SFTP Port

The SFTP service uses a non-standard port number for connections to the appliance. This is to avoid conflicts with administrative SSH connections to port 22. By default, the SFTP port is 218 and must be specified on the SFTP client prior to connecting. For example, an OpenSolaris client using SFTP, would connect with the following command:

manta# sftp -o "Port 218" root@guppy

Logs

To view service logs, refer to the Logs section from Services.

Tasks

SFTP Tasks

Allowing SFTP access to a share

1. Go to Configuration->Services
2. Check that the SFTP service is enabled and online. If not, enable the service.
3. Select or add a share in the Shares screen.
4. Go to the "Protocols" section, and check that SFTP access is enabled. This is also where the mode of access (read/read+write) can be set.