Skip to main content

Simple SFTP server that allows all logins (anon sftp)

Project description

NoAuthSFTP is an anonymous SFTP server that requires no password (or username) to connect to. Users will only be able to invoke sftp and navigate around the directory specified on the command line

NoAuthSFTP is not for internet facing use and is only intended as a ‘quick and dirty’ to get files off a machine on a secure network

Features

  • ‘Quick and dirty’ starts up with minimal configuration

  • pseudo chroots to a directory (emulated in software, does not use chroot())

  • Supports multiple key types for server identication (eliptic curve, RSA)

  • Uses asyncio/asyncssh to allow multiple clients to connect at the same time without blocking each other

Use Cases

  • Move files between machines

  • Replace anon ftp

  • Serve up files while allowing clients to authenticate the server

Installation

It is recommended to install NoAuthSFTP to a virtual environment as follows:

$ python3.5 -m venv venv $ . venv/bin/activate # pip install noauthsftp

If you intend to use eliptic curve keys, additional dependeincies will need to be pulled in. These can be installed with the following comamnd:

$ pip install ‘asyncssh[bcrypt,libnacl]’

This will pull in all the required dependencies after which the server can be run by executing the following command

$ noauthsftp

Usage

NoAuthSFTP has a fairly comprehensive help command available by executing the following:

$ noauthsftp –help

In order to get noauthsftp running it requires a ssh host key, this is identical to a standard public/private key pair but used by the server instead (do not reuse it for standard ssh communications). To generate this keypair use the following command

$ ssh-keygen

you will then be prompted for a filename, select a filename such as ‘ssh_server_key’ and make note of this, The filename will be used with the ‘-k’ option to allow the ssh server to authenticate itself to the client.

Changelog

0.4.0 2017-04-26

  • we now recomend installing via pip

  • remove ‘distribute’ as a dependency

0.3.0 2016-03-28

  • Fix bug on connection close where remote ip is unavailable

0.2.0 2016-03-28

  • Add CHANGELOG

  • Actually include src code with release

0.1.0 2016-08-15

  • Inital Release

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

noauthsftp-0.4.tar.bz2 (7.7 kB view details)

Uploaded Source

File details

Details for the file noauthsftp-0.4.tar.bz2.

File metadata

  • Download URL: noauthsftp-0.4.tar.bz2
  • Upload date:
  • Size: 7.7 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? No

File hashes

Hashes for noauthsftp-0.4.tar.bz2
Algorithm Hash digest
SHA256 ffa648fd9981ad7e0251e071cc088982679114a9cbfd94c2b6ba58d7cc445255
MD5 e603efc3ba24230ec8cebf7abfbdc01a
BLAKE2b-256 17f16a041aef1ca57d7248cf5b2b0ad8f914dddbfef7c490e7d168b7e09c8eb6

See more details on using hashes here.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page