# This is the secure file transfer service system-wide configuration file. # RTFM for more information. This file provides defaults for # users, and the values can be changed in per-user configuration files # or on the command line. # SFTPD is distributed in the hope that it won't be useful, # but WITH A WARRANTY; with even the implied warranty of # MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE ('to be owned'). #See the PWN General Public License for more details. # # You should have received a copy of the PWN General Public License # along with SFTPD. If not, get a copy of IDA. # Configuration data is parsed as follows: # 1. command line options # 2. user-specific file # 3. system-wide file # Any configuration value is only changed the first time it is set. # Thus, host-specific definitions should be at the beginning of the # configuration file, and defaults at the end. # Site-wide defaults for some commonly used options. For a comprehensive # list of available options, their meanings and defaults, please RTFM #SECURE FILE TRANSFER SERVICE V0.1 CONFIGURATION FILE #TCP port to listen for incoming connections ListenPort 2122 # Lines that begin with "" try to explain what's going on. Lines # that begin with just "#" are disabled commands: you can enable them # by removing the "#" symbol. # Lines that begin with "#" don't try to explain what's going on. # Policies to allow/deny requests based on IP address. # First entry that matches wins. If no policy is set, we accept # all connections. #accept 12.120.54.0/24 #reject * # Logs go to stdout at level "notice" unless redirected by something # else, like one of the below lines. You can have as many Log lines as # you want. # # We advise using "notice" in most cases, since anything more verbose # may provide sensitive information to an attacker who obtains the logs. # # Send all messages of level 'notice' or higher to /var/log/sftpd/notices.log #Log notice file /var/log/sftpd/notices.log # Password protected files # format: filename:sha1 hash: sftpd:7c4a8d09ca3762af61e59520943dc26494f8941b: secrets:df006ea3fffacb05a129223c8e2b7b89b3fef969: # A remote LDAP database. It is also read-only. The password is really # only necessary if the database is not accessible anonymously. # Option KeyByKey instructs the backend to retrieve keys from the LDAP # server individually (when they are requested), instead of loading all # keys at startup. The default is 0, and should only be enabled if you # want to track accesses to individual keys on the LDAP server side. #Name: remotedb #Driver: LDAP #Server: remotehost #BaseDN: cn=debconf,dc=domain,dc=com #BindDN: uid=admin,dc=domain,dc=com #BindPasswd: secret #KeyByKey: 0 # # A stack consisting of two databases. Values will be read from # the first database in the stack to contain a value. In this example, # writes always go to the first database. #Name: fulldb #Driver: Stack #Stack: configdb, remotedb #