How to manually enable direct SFTP access via password

Our SSH gateway provides convenient access to all of your environments via SSH keys, but sometimes password-based access is required (to give clients or other non-MightyBox users a login, for example). Take the following steps to enable this direct SFTP access to your environment:

  1. Install root access on target node (In a cluster, the target node should be one of your app servers, NOT your storage node)
  2. Add a public IP to the target node (if not already present)
  3. Set up password on litespeed user:
sudo passwd litespeed
  1. Edit SSH config:
nano /etc/ssh/sshd_config
  1. Add this at end of the file:
Match User litespeed
        ForceCommand internal-sftp
        PasswordAuthentication yes
        #ChrootDirectory /
        PermitTunnel no
        AllowAgentForwarding no
        AllowTcpForwarding no
        X11Forwarding no=
  1. Restart SSH:
sudo systemctl restart sshd

Now SFTP should work directly over port 22 with user “litespeed” and the password you set above.