I need to build a dedicated machine which will be used to allow our clients to upload and download files in a secure manner.

Each client has multiple users, and I would rather not hand out generic client users which are used by multiple people. Each client should have access to their files only, and no others.

There is no use-case (yet) for multiple clients interacting with a single file or space.

Is there an existing solution to automating the creation and maintenance of these accounts, preferably with a view to integration with LDAP? Currently it looks like if we want to use SFTP with chrooted spaces they will need to be set up manually (or an automation hand-rolled).

If a solution exists for a different (but still secure) transfer method, such as FTPS, I'm all ears.