SFTP Couldn't read packet: Connection reset by peer

小渣渣

使用 sftp 命令测试登录的时候报错如下：

[root@VM_0_9_centos itsvse]# sftp itsvse@127.0.0.1
The authenticity of host '127.0.0.1 (127.0.0.1)' can't be established.
ECDSA key fingerprint is SHA256:uVdYfzhho+yQR10ozp3vuRAnzWsYMBgW0rKVaEhYVm0.
ECDSA key fingerprint is MD5:e7:d9:fe:c8:3e:9a:36:40:e7:f3:a3:ba:7b:73:fd:a2.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added '127.0.0.1' (ECDSA) to the list of known hosts.
itsvse@127.0.0.1's password:
packet_write_wait: Connection to 127.0.0.1 port 22: Broken pipe
Couldn't read packet: Connection reset by peer

查看系统日志，并尝试重新登录

登录可见。

Removed slice User Slice of itsvse.

解决方案

更改文件夹所属用户和组

登录可见。

注：ChrootDirectory设置的目录权限及其所有的上级文件夹权限，属主和属组必须是root；

ChrootDirectory设置的目录权限及其所有的上级文件夹权限，只有属主能拥有写权限，也就是说权限最大设置只能是755


（备注：经过测试用户组可以不必是 root！）