Question How to setup a SFTP account in Plesk

[onki]

Server operating system version

ubuntu 20.4

Plesk version and microupdate number

Obsidian 18.0.40

Hi,

I am in the need of a SFTP account on one of my domains.
There is no way to do so what I have tried so far.
Is it true that only regular ftp users can be setup at the moment?
I understand that SFTP has only parts of the name in common with FTP but SFTP is a very common thing for data transfer today.
Is there a hidden option or so in PLesk to setup SFTP accounts?

Best regards

 

[scsa20]

Is there a specific reason you need another SSH account for use of FTP? If it's just because you want a secure way of transferring files, why not just create FTP accounts and enable FTP over TLS for the encryption?

How to secure FTP (FTPS) in Plesk for Linux

Applicable to: Plesk for Linux Question How to configure secure FTP (FTPS) in Plesk for Linux? Answer Note: the below steps only make FTPS protocol available. Plesk does not manage FTPS mode set...

support.plesk.com

Using Secure FTP

To secure FTP connections to your server, Plesk supports the FTP Secure (FTPS, FTP-SSL/TLS) protocol. Plesk gives you...

docs.plesk.com

 

[Peter Debik]

Currently, SFTP is only available for the system user of the subscription (the first user account that owns the subscription). The reason for that is that SFTP is an SSH connection with FTP on top. FTPS is an FTP connection with SSL/TLS. IMHO for all common applications, FTPS is just as secure as SFTP, but that seems to be a matter of taste.
If you would like to see an option where you can add more SFTP user accounts to the same subscription, please vote for the feature request here:

Enable chrooted sftp for more than one user per account

If I use FTP, I can make as many users as I want. For various reasons, using FTP is not optimal at my workplace. I'd like to be able to let each ftp user I create log in with chrooted sftp. I'm able to modify /etc/passwd and /var/www/vhosts/example.org/etc/passwd to make it work, but doing that...

plesk.uservoice.com

 

[onki]

I need SFTP for an external application that stores data on the server.
Use of FTP with TLS is not supported by this application.
Since this app has nothing to do with the web domain (website, mail etc.) I don't want to use the general login for safety reasons.

Best regards
Onki

 

[Peter Debik]

If you have root access to your server, you can add a user account through the shell and use that account for sftp. It will then be completely independent from Plesk.

 

[ditsolutions]

If you have root access to your server, you can add a user account through the shell and use that account for sftp. It will then be completely independent from Plesk.

Hi Peter,

I tried it doesn't work! Any other way / workaround, Pls do let me

Thanks & Regards
Shyam

 

[Kaspar@Plesk]

Hi Peter,

I tried it doesn't work! Any other way / workaround, Pls do let me

Thanks & Regards
Shyam

What exactly doesn't work for you when trying this?

 

[ditsolutions]

What exactly doesn't work for you when trying this?

so basically every domain has one default user right SFTP which is accessible now we need additional user for the same but that additional user is only possible via FTP and not SFTP

When we try to connect the additional user via port 22 it shows EOF etc..

Thanks & Regards,
Shyam

 

[andyxyz]

Create the ftp account as usual. Make sure you set the domain as root not a publically accessible sub folder (bash history will be stored here)

now edit /etc/passwd change /bin/false to /bin/bash

restart ssh

now your ftp user can ssh /sftp into the box

not supported but works just fine.

 

[ditsolutions]

Create the ftp account as usual. Make sure you set the domain as root not a publically accessible sub folder (bash history will be stored here)

now edit /etc/passwd change /bin/false to /bin/bash

restart ssh

now your ftp user can ssh /sftp into the box

not supported but works just fine.

no but doing this will give me root access to that user but we need to set specific directory access only and not the whole domain so yea..