We have an nfs share which is mounted to
User A is found within group sftp (in active directory) and can only sftp to /mnt/logs. In sshd_config we have:
Match Group sftpgr X11Forwarding no AllowTcpForwarding no ChrootDirectory %h ForceCommand internal-sftp
Directory /mnt/logs has the following permissions:
drwxrwxr-x userX sftp
User A can sftp to /mnt/logs
Now we have another user, User B which can ssh to the host machine. Once we add User B to sftp group in active directory User B can no longer ssh.
How do we allow a group of users to sftp only to the /mnt/logs folder whilst allowing other users to ssh and access(and delete) files within /mnt/logs .
setfacl is not working with nfs.