我正在尝试设置一个带有多个用户的SFTP服务器,每个用户都有自己的主目录。
我阅读了这篇答案,其中解释了如何为单个用户设置虚拟目录,但我不确定如何让多个用户都有自己的主目录。
请问有人可以告诉我如何操作吗?
我正在尝试设置一个带有多个用户的SFTP服务器,每个用户都有自己的主目录。
我阅读了这篇答案,其中解释了如何为单个用户设置虚拟目录,但我不确定如何让多个用户都有自己的主目录。
请问有人可以告诉我如何操作吗?
我终于让它正常工作了。这是一个可用的示例:
pom.xml
<dependency>
<groupId>org.apache.sshd</groupId>
<artifactId>sshd-core</artifactId>
<version>0.14.0</version>
</dependency>
Test.java
import java.io.File;
import java.io.IOException;
import java.util.ArrayList;
import java.util.List;
import java.util.logging.Level;
import java.util.logging.Logger;
import org.apache.sshd.SshServer;
import org.apache.sshd.common.NamedFactory;
import org.apache.sshd.common.file.virtualfs.VirtualFileSystemFactory;
import org.apache.sshd.server.Command;
import org.apache.sshd.server.PasswordAuthenticator;
import org.apache.sshd.server.UserAuth;
import org.apache.sshd.server.auth.UserAuthPassword;
import org.apache.sshd.server.command.ScpCommandFactory;
import org.apache.sshd.server.keyprovider.SimpleGeneratorHostKeyProvider;
import org.apache.sshd.server.session.ServerSession;
import org.apache.sshd.server.sftp.SftpSubsystem;
public class Test {
public static void main(String args[]) {
try {
Runtime.getRuntime().exec("sudo fuser -k " + "2222" + "/tcp");
} catch (IOException ex) {
Logger.getLogger(Test.class.getName()).log(Level.SEVERE, null, ex);
}
File TEST = new File("test");
File ADMIN = new File("admin");
File ERROR = new File("error");
TEST.mkdirs();
ADMIN.mkdirs();
ERROR.mkdirs();
SshServer sshServer = SshServer.setUpDefaultServer();
sshServer.setFileSystemFactory(new VirtualFileSystemFactory(ERROR.getAbsolutePath()));
sshServer.setPort(2222);
sshServer.setKeyPairProvider(new SimpleGeneratorHostKeyProvider(new File("my.pem").getAbsolutePath()));
sshServer.setCommandFactory(new ScpCommandFactory());
List<NamedFactory<UserAuth>> userAuthFactories = new ArrayList<>();
userAuthFactories.add(new UserAuthPassword.Factory());
sshServer.setUserAuthFactories(userAuthFactories);
sshServer.setPasswordAuthenticator(new PasswordAuthenticator() {
@Override
public boolean authenticate(String username, String password, ServerSession session) {
if ((username.equals("test")) && (password.equals("test"))) {
sshServer.setFileSystemFactory(new VirtualFileSystemFactory(TEST.getAbsolutePath()));
return true;
}
if ((username.equals("admin")) && (password.equals("admin"))) {
sshServer.setFileSystemFactory(new VirtualFileSystemFactory(ADMIN.getAbsolutePath()));
return true;
}
return false;
}
});
List<NamedFactory<Command>> namedFactoryList = new ArrayList<>();
namedFactoryList.add(new SftpSubsystem.Factory());
sshServer.setSubsystemFactories(namedFactoryList);
try {
sshServer.start();
} catch (IOException ex) {
Logger.getLogger(CarrierSFTPServer.class.getName()).log(Level.SEVERE, null, ex);
}
}
}
以上为更新版本(截至sshd-core的1.4.0版本)。请注意,我没有为主机密钥提供者指定文件,因为我的是用于Junit集成测试。
List<NamedFactory<UserAuth>> userAuthFactories = new ArrayList<NamedFactory<UserAuth>>();
userAuthFactories.add(new UserAuthPasswordFactory());
List<NamedFactory<Command>> sftpCommandFactory = new ArrayList<NamedFactory<Command>>();
sftpCommandFactory.add(new SftpSubsystemFactory());
SshServer sshd = SshServer.setUpDefaultServer();
sshd.setPort(22);
sshd.setKeyPairProvider(new SimpleGeneratorHostKeyProvider());
sshd.setUserAuthFactories(userAuthFactories);
sshd.setCommandFactory(new ScpCommandFactory());
sshd.setSubsystemFactories(sftpCommandFactory);
sshd.setPasswordAuthenticator(new PasswordAuthenticator() {
@Override
public boolean authenticate(String username, String password, ServerSession session) {
if ((username.equals("admin")) && (password.equals("admin"))) {
sshd.setFileSystemFactory(new VirtualFileSystemFactory(new File("C:\\devl").toPath()));
return true;
}
return false;
}
});
sshd.start();
对于版本2.8.0(依赖项GAV:org.apache.sshd:sshd-sftp:2.8.0
),这个文件为我提供了很好的资源:
由于链接可能会断裂,以下是摘录:
// ...
import org.apache.sshd.common.file.virtualfs.VirtualFileSystemFactory;
import org.apache.sshd.server.SshServer;
import org.apache.sshd.server.keyprovider.SimpleGeneratorHostKeyProvider;
import org.apache.sshd.sftp.server.SftpSubsystemFactory;
import org.springframework.beans.factory.InitializingBean;
import org.springframework.context.SmartLifecycle;
import org.springframework.core.io.ClassPathResource;
import org.springframework.integration.sftp.session.DefaultSftpSessionFactory;
import org.springframework.util.Base64Utils;
import org.springframework.util.StreamUtils;
public class EmbeddedSftpServer implements InitializingBean, SmartLifecycle {
// ...
private DefaultSftpSessionFactory defaultSftpSessionFactory;
public void setPort(int port) {
this.port = port;
}
public void setDefaultSftpSessionFactory(DefaultSftpSessionFactory defaultSftpSessionFactory) {
this.defaultSftpSessionFactory = defaultSftpSessionFactory;
}
@Override
public void afterPropertiesSet() throws Exception {
final PublicKey allowedKey = decodePublicKey();
this.server.setPublickeyAuthenticator((username, key, session) -> key.equals(allowedKey));
this.server.setPort(this.port);
this.server.setKeyPairProvider(new SimpleGeneratorHostKeyProvider(new File("hostkey.ser").toPath()));
server.setSubsystemFactories(Collections.singletonList(new SftpSubsystemFactory()));
final String pathname = System.getProperty("java.io.tmpdir") + File.separator + "sftptest" + File.separator;
new File(pathname).mkdirs();
server.setFileSystemFactory(new VirtualFileSystemFactory(Paths.get(pathname)));
}
// ...
我通常不指定端口,它会使用一个随机端口。
VirtualFileSystemFactory
有一个setUserHomeDir
方法,可以指定用户的主目录。然后FileSystemFactory
将能够处理多个用户。 - irla无法解析符号'CarrierSFTPServer'
。 - RobertG