sshd `Match` save me ..

[fiore@brain.worm.pink]

sshd Match save me ..

[coolbean@brain.worm.pink]

@fiore sshd configuration is so fun /gen

[fiore@brain.worm.pink]

@coolbean im trying to do smth

i have a Match Group where only sftp is allowed , through password auth , in a chroot . but i also want users to be able to change their password .. how do u think i could set this up

[jackemled@furry.engineer]

@fiore @coolbean evil file created per user that only that user can access & the user types their new password in & an evil daily cronjob running as root sets the new password to that & then clears the contents of the file.

Don't do this because it's evil.

[avery@furry.engineer]

@fiore kind of evil but maybe a separate ssh port where they can only access passwd, similar to them only accessing sftp-internal on this one

[avery@furry.engineer]

@fiore ok nvm i found this and it seems to work very well
https://superuser.com/a/1154084

only needed to change the path to /usr/lib/openssh/sftp-server and ForceCommand to point at where i saved the script

then could run ssh test@localhost passwd

[fiore@brain.worm.pink]

@jackemled@furry.engineer @coolbean might honestly just write a wrapper script to allow both internal-sftp and passwd

[fiore@brain.worm.pink]

@avery@furry.engineer thats SUPER evil

[fiore@brain.worm.pink]

@avery@furry.engineer yep , i was thinking smth along these lines as well .