Linux – Deny Home-Directory-Access for root

I trust you can already SSH to a system on the remote private network (10.0.0.0). If your local system is running openssh, add to your $HOME/.ssh/config:

Host gatewaymachine
  LocalForward 12080 remote_ip:portnum

Where 'remote_ip' is the IP address of the remote clustermachine system where gdbserver runs, and portnum is the port that it listens on. SSH to gatewaymachine, then connect your application to localhost, port 12080. For example if this is a web application

http://localhost:12080

If you're not using a web application, you'll need to set up your connection information to reflect that you're going to 'localhost' port '12080' (or whatever port you like, see below).

Instead of editing your ssh config, you can also use ssh command parameters:

ssh -L 12080:remote_ip:portnum gatewaymachine

(change 12080 to whatever port you want above 1024; below 1024 and you'll need root access to bind to the port)

1. create group 'SSH Users' in computer management
2. Add group to gpedit -> Computer Configuration -> Windows Settings -> Security Settings -> Local Policies -> User Rights Assignment -> Allow log on locally (see Can't login to Cygwin sshd server with a non-administrator user account)
3. run gpupdate
4. Add ftpuser to group SSH Users

5. Append details in /etc/sshd_config:

   Subsystem sftp internal-sftp
   
   Match User ftpuser
       ChrootDirectory /home/ftpuser
       X11Forwarding no
       AllowTcpForwarding no
       ForceCommand internal-sftp
   

   (the keywords on the lines following the Match directive apply only to the user ftpuserand override those set in the global section of the config file, until either another Match line or the end of the file.)

6. Activate ftpuser user through copSSH wizard
7. Delete all .ssh .bashprofile files/folders under ftpuser folder

8. Set SvcCOPSSH user to root id 0

   SvcCOPSSH:unused_by_nt/2000/xp:**0**:545:U...
   

   (see http://www.itefix.no/i2/node/11956)

9. Might need to do the following as well in copSSH 'UNIX BASH Shell'

   cd /
   chown SvcCOPSSH /
   chmod 0755 /
   

10. restart openssh service