sort of jailed ssh session

[williamvergara]

Hi everybody, I have been searching the net for a similar scenario as mine, but I have not been successful , so here comes my problem. I need to setup this environment : its a machine, which is member of a windows domain; users are from AD (auth works with kerberos, they can ssh in the server). But hey should have a totally normal ssh session if they are in our lan or vpn (which right now happens), and they should be jailed if they login from the outside (which is the real problem here), and they should be only allowed to copy, upload, download , i mean basic ftp stuff.

Now I have read thousands of howtos to make a "jailed" login, even with chroot or with sftp native from openssh server, but i have not found anywhere, how would it be possible to dynamically change the type of session depending of where the client is.

I would be more than grateful if i just get a link in the right direction (actually any type of help would be thanked )

Regards