连接sftp报错:packet_write_wait: Connection to ...,fatal:bad ownership or modes for chroot directory...

环境:OpenSSH_7.4p1 

报错如下:

packet_write_wait: Connection to 127.0.0.1 port 21: Broken pipe Could not read packet: connection reset by peer

 查看 /var/log/secure

fatal:bad ownership or modes for chroot directory component "/path/"

 sshd_config配置如下:

问题根源就是目录权限问题:

解决方式一:

注释掉ChrootDirectory /cib/sftp/%u这一项,这样解决带来的问题是,用户登陆sftp后会直接来到系统根目录

解决方式二:逐层授权

chown root:root /cib /cib/sftp

chown root:sftp /cib/sftp/yypt

chmod 755 /cib /cib/sftp /cib/sftp/yypt

最后都要重启sshd

systemctl restart sshd.service 

注意:sftp目录的权限设定原则:
1、由ChrootDirectory指定的目录到根目录只能是root
2、由ChrootDirectory指定的目录到根目录为止都不可以具有群组写入权限

猜你喜欢

转载自blog.csdn.net/f746262041/article/details/129307636