0

I've got a Hetzner Dedicated Root server, and would like to either allow the root user to access SFTP - Which doesn't work at the moment, I get this error:

Status: Connecting to <IP>... Response: fzSftp started, protocol_version=8 Command: open "root@<IP>" 22 Command: Pass: ** Error: Authentication failed. Error: Critical error: Could not connect to server

Or, I'd like a new secondary user with all permissions. At the moment I have a second user, but it cannot access/read/write all directories (/etc/nginx/sites-available specifically)

I used OVH before Hetzner and they had pre-configured root SFTP access however Hetzner's servers don't have this setup and I've been struggling.

So, to summarise: I'd like to use SFTP as a root/sudo user with unrestricted access to all files..

1

You don't - such a mechanism for elevated privilege browsing as a non-root user doesn't exist in SFTP.

You would have to enable the root account and give whomever needs the elevated access direct access to that account instead, which for obvious security reasons (risk of bruteforcing the root account and risking someone gaining power over your system, for starters) is dangerous.

  • OVH allowed full unrestricted SFTP over the root login. – Brisk Node Aug 28 '18 at 16:00
  • @BriskNode but that's OVH being stupid with their VPSes; default permissions and such, and you're using the root account directly. (They actually intend for you to use that only temporarily and then harden up the system). Just because OVH allows something doesn't mean it's not dangerous or a good security practice. – Thomas Ward Aug 28 '18 at 16:01
  • Thanks for telling me about this. I had a dedicated server on OVH with this but switched to Hetzner for more RAM for my budget. Is there a way to give another SFTP only user access to all files? – Brisk Node Aug 28 '18 at 16:04
  • @BriskNode ACLs, but you should never give a non-root account total system access like that. – Thomas Ward Aug 28 '18 at 16:05
  • I'll probably remove access when I've done setting it up – Brisk Node Aug 28 '18 at 16:07

Your Answer

By clicking "Post Your Answer", you acknowledge that you have read our updated terms of service, privacy policy and cookie policy, and that your continued use of the website is subject to these policies.

Not the answer you're looking for? Browse other questions tagged or ask your own question.