I'm trying to give my clients at a charity a way of backing up their important files onto my server (an offsite powermac g3 running OS X 10.4.7) I simply just can't seem to get it working properly First I tried setting up a new user and enabling FTP in the Sharing Preferences. No go. Couldn't log in with any of my FTP client software (Cyberduck, Fetch etc) Then I tried SFTP. Aha! works! But once logged in, the user can navigate through my entire HD array - look at all my files and the files of my other clients. Oi! Stop! Tried out PureFTPd Manager - it came highly recommended as able to 'jail' users to their own directory. Lovely interface. But it still won't work. Users couldn't FTP in, and PureFTPd Manager can't handle SFTP. Is FTP in OS X fundamentally broken? Read somewhere that OSX from about 10.4.3 onwards no longer supports FTP as it dislikes passwords being sent to it in cleartext. Wish Apple would stop advertising it as 'run your own FTP server' in that case. I tried setting the new user accounts to the minimum level of permissions (highly managed / restricted account in System / Preferences / Users), and logging via standard OSX SFTP but they can still look in each others filesystems, which is a no go. I also tried to set up a 'chroot jail' so that FTP / SFTP users would be confined to their own home directories, but apparently from 10.4.3 onwards, chroot jails no longer work, making the system less secure. To be honest, if this is true, this is the biggest disappointment I've had with OS X so far. I'm used to things 'just working' and being secure by default. I tried some alternatives: - tried FTP/SSL-TLS via a home-brew certificate, but it doesnt seem suitable for my non-computer literate clients - too many dire warnings to click through. - also tried setting up a HTML upload/download files website (password protected) on the server, but all the kits I could find on the web required extensive setting up of Java, PHP, CGI etc. I can deal with setting up one or two of them, but they needed to all be set up (apparently) and the instructions soon got over my head. If you can recommend a simple way of allowing people to upload /download files while not giving them free roam of the system, I'd be very thankful.