<![CDATA[sshd `Match` save me ..]]>sshd Match save me ..

]]>https://board.circlewithadot.net/topic/5521f9f3-efed-454c-8bfb-34a9371e2f1b/sshd-match-save-me-..RSS for NodeFri, 15 May 2026 05:01:04 GMTSun, 10 May 2026 13:42:15 GMT60<![CDATA[Reply to sshd `Match` save me .. on Sun, 10 May 2026 19:01:09 GMT]]>@avery@furry.engineer yep , i was thinking smth along these lines as well .

]]>https://board.circlewithadot.net/post/https://brain.worm.pink/objects/ec1e5a32-b528-4df7-9871-3361760b1e0chttps://board.circlewithadot.net/post/https://brain.worm.pink/objects/ec1e5a32-b528-4df7-9871-3361760b1e0cSun, 10 May 2026 19:01:09 GMT<![CDATA[Reply to sshd `Match` save me .. on Sun, 10 May 2026 19:00:29 GMT]]>@avery@furry.engineer thats SUPER evil

]]>https://board.circlewithadot.net/post/https://brain.worm.pink/objects/59f84982-8af9-4411-aaf5-b9d6fa8abed9https://board.circlewithadot.net/post/https://brain.worm.pink/objects/59f84982-8af9-4411-aaf5-b9d6fa8abed9Sun, 10 May 2026 19:00:29 GMT<![CDATA[Reply to sshd `Match` save me .. on Sun, 10 May 2026 18:59:53 GMT]]>@jackemled@furry.engineer @coolbean might honestly just write a wrapper script to allow both internal-sftp and passwd

]]>https://board.circlewithadot.net/post/https://brain.worm.pink/objects/512274e2-b10a-4670-8493-4fd504eda690https://board.circlewithadot.net/post/https://brain.worm.pink/objects/512274e2-b10a-4670-8493-4fd504eda690Sun, 10 May 2026 18:59:53 GMT<![CDATA[Reply to sshd `Match` save me .. on Sun, 10 May 2026 18:53:56 GMT]]>@fiore ok nvm i found this and it seems to work very well
https://superuser.com/a/1154084

only needed to change the path to /usr/lib/openssh/sftp-server and ForceCommand to point at where i saved the script

then could run ssh test@localhost passwd

]]>https://board.circlewithadot.net/post/https://furry.engineer/ap/users/115747252861114477/statuses/116551793798991952https://board.circlewithadot.net/post/https://furry.engineer/ap/users/115747252861114477/statuses/116551793798991952Sun, 10 May 2026 18:53:56 GMT<![CDATA[Reply to sshd `Match` save me .. on Sun, 10 May 2026 18:46:05 GMT]]>@fiore kind of evil but maybe a separate ssh port where they can only access passwd, similar to them only accessing sftp-internal on this one

]]>https://board.circlewithadot.net/post/https://furry.engineer/ap/users/115747252861114477/statuses/116551762914594744https://board.circlewithadot.net/post/https://furry.engineer/ap/users/115747252861114477/statuses/116551762914594744Sun, 10 May 2026 18:46:05 GMT<![CDATA[Reply to sshd `Match` save me .. on Sun, 10 May 2026 18:27:13 GMT]]>@fiore @coolbean evil file created per user that only that user can access & the user types their new password in & an evil daily cronjob running as root sets the new password to that & then clears the contents of the file.

Don't do this because it's evil.

]]>https://board.circlewithadot.net/post/https://furry.engineer/users/jackemled/statuses/116551688767335272https://board.circlewithadot.net/post/https://furry.engineer/users/jackemled/statuses/116551688767335272Sun, 10 May 2026 18:27:13 GMT<![CDATA[Reply to sshd `Match` save me .. on Sun, 10 May 2026 16:16:21 GMT]]>@coolbean im trying to do smth

i have a Match Group where only sftp is allowed , through password auth , in a chroot . but i also want users to be able to change their password .. how do u think i could set this up

]]>https://board.circlewithadot.net/post/https://brain.worm.pink/objects/d6c3ec4e-392e-413d-b818-9a78ceda9ebbhttps://board.circlewithadot.net/post/https://brain.worm.pink/objects/d6c3ec4e-392e-413d-b818-9a78ceda9ebbSun, 10 May 2026 16:16:21 GMT<![CDATA[Reply to sshd `Match` save me .. on Sun, 10 May 2026 14:12:21 GMT]]>@fiore sshd configuration is so fun /gen]]>https://board.circlewithadot.net/post/https://brain.worm.pink/objects/28af03ca-322e-4a58-8a98-1aa630488d55https://board.circlewithadot.net/post/https://brain.worm.pink/objects/28af03ca-322e-4a58-8a98-1aa630488d55Sun, 10 May 2026 14:12:21 GMT