CUCM backup with OpenSSH

Question

Hello All,
Currently our CUCM backups are running with OpenSSH. I would like to check the credentials for SFTP. I couldn't find any good doc for OpenSSH commands to check/change the credentials in OpenSSH. Assistance are much appreciated. 
Thanks
Murali

Answer 1

Here's a snippet of the sshd_config file that I have working on a Linux distro with OpenSSH v6.7 and CUCM/Unity backups.
Create a user, add them to the sftponly group, set the home directory to a folder where you want the backups to go. For a little extra security, you can set the user shell to /bin/false.  Newer OpenSSH versions are picky with folder permissions. This home folder needs root:root permissions.  Create a user-writable subfolder where the backups will go.
Newer OpenSSH disables some encryption ciphers, you will need to enable some for this to work.
For example, create a new user called ciscobackup, home directory of /home/ciscobackup with no shell access (this may be a different procedure depending which linux distro you are using)
useradd -d /home/ciscobackup -G sftponly -s /bin/false ciscobackup
passwd ciscobackup
mkdir /home/ciscobackup/callmanager
chown root:root /home/ciscobackup
chown ciscobackup:ciscobackup /home/ciscobackup/callmanager
chmod 775 /home/ciscobackup/callmanager
/etc/ssh/sshd_config example:
Protocol 2
Ciphers aes256-cbc,aes128-cbc
Subsystem       sftp    internal-sftp
Match Group sftponly
  ChrootDirectory %h
  X11Forwarding no
  ForceCommand internal-sftp
  AllowTcpForwarding no
Restart sshd.
In CUCM add a backup server in your call manager and set the folder to /callmanager.
Check the sshd log files on your linux box to troubleshoot any folder permissions or cipher errors if adding the backup server failed.