Limit access (s)FTP

[Scareh]

Hiya,

the goal: give a user a specific "folder" on the nas that he can enter through FTP but not leave to other folder/disks but that one folder, sort of a "homefolder".

Version freenas used:
Build FreeNAS-8.3.0-RELEASE-x86 (r12701M)

things i did sofar:
I created a dataset to use as a homedirectory:
http://img23.imageshack.us/img23/2600/dataset.jpg

created a user with home directory to the ZFS dataset i created earlier:
http://img94.imageshack.us/img94/7594/usero.jpg

next I activated the FTP, with the option "allways chroot" and "enable ssl/tls" turned on.
"Allow Root Login" and "Allow Anonymous Login" were turned off.
SSH was also activated.

When i use WINSCP to connect through SFTP(using the port opened for SSH) towards the server using the michlimit account. The screen opens on the folder I want the user to access but I’m able to go higher up to the other folders.
However, when I use WINSCP with FTP and TLS explecit encryption (and the port for FTP) I’m not allowed to leave the homefolder I setup for the user.

Using Filezilla, another FTP client normal connection fails because it requires ssl/tls encryption.
So I open it while using sftp://ip-adres (port ssh) and again I’m able to go up to other folders.

So In short I’m at a loss why it works on one and not on the other. I want the connection going through secure channels (obviously) and I want to limit my users to specific folders. (even if that means creating lots of datasets for each specific user).
What did I configure wrong/badly? Ask for more screenshots if you need em ^^

 

[Scareh]

found the problem:

I was not updating my rights on the disk where the dataset was made. So I had all rights on the disk and limited rights on the dataset.
Which wasn't my intention ofc ^^

thanks allready for the views

 

[ethajn]

found the problem:

I was not updating my rights on the disk where the dataset was made. So I had all rights on the disk and limited rights on the dataset.
Which wasn't my intention ofc ^^

thanks allready for the views

I have been trying to do the same thing - limit sftp access to a user's home directory. I've been trying to do this in a bunch of different ways and none have worked so far. I have tried the methods listed in the documentation for chrooting ssh users, but no success. The twist is that I'm not using zfs (32 bit system. not enough ram. I know, I know. It's on my wish list.) Can it be done with UFS?