Re: ftp over ssh

[Aggelis Aggelis]

On 11/8/06, Gorobets Igor [EMAIL PROTECTED] wrote:

Hello. How correctly to adjust this miracle? :-)
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


from http://forums.serverbeach.com/archive/index.php/t-2179.html

FTP is insecure. Passwords are sent in plaintext for anyone to snoop.
SFTP is secure, but to use SFTP you generally have to give a user SSH
access. Which is not always desirable.

So, to give a user SFTP access without SSH access, set their shell to
/usr/libexec/openssh/sftp-server instead of /bin/sh or /bin/bash.

If your sftp-server is not there, use locate sftp-server to find it.

in freebsd sftp-server is located in the /usr/libexec directory.

another solution is to use rssh (meaning restricted ssh)

from rssh faq
Q: Why did you write this software?

A: Mainly, because the question of how to restrict access to scp or
sftp only kept coming up on a few different mailing lists I was on at
the time... Several people made some suggestions (like using a shell
script as the user's shell) which sort of work, but aren't terribly
secure or reliable. The commercial SSH product has a program to do
this, but OpenSSH does not. Joe Boyle has a similar program called
scponly, which at the time I looked at it had some security problems,
though they have since been fixed... It does currently have some
functionality that rssh does not (namely it works with WinSCP; see
below), and some that it never will have (more on that in a moment).
Obviously I prefer the way I've implemented my program, or else I
wouldn't have written it.   =8^)

I did not write this program for my own use; I do not use it today,
nor have I ever (though obviously I would if the occasion arose). At
the time, I was bored, and I thought this project would be amusing and
educational, as well as fill a gap. Please keep this in mind when
asking for support. Odds are I'll give it pretty quickly if I've got a
free minute, but what you get is what you get, and I won't loose sleep
over slow response time. You've been warned.


personaly i prefer the first solution from a security viewpoint
because sftp-server is writen by the openssh team.


Any Comments on the above solutions are welcomed.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: The best scripts ever (trick or treat)

[Aggelis Aggelis]

On 11/1/05, Giorgos Keramidas [EMAIL PROTECTED] wrote:
 On 2005-10-31 17:11, Gary Kline [EMAIL PROTECTED] wrote:
  On Mon, Oct 31, 2005 at 10:18:12PM +, dgmm wrote:
   On Monday 31 October 2005 21:21, Fafa Hafiz Krantz wrote:
POST YOUR COOLEST SCRIPTS! 3 (trick or treat)
  
   Unless it's FreeBSD specific scripts you are talking about would
   news://comp.unix.shell not be better for this?
 
Yeah, but reached netnews may be more trouble for lots of us.
I say, Come on down!

 Nah!  Too much traffic for little gain, I think.

 A web page with shell script collections and a link posted to the
 list would be *much* more preferable, if you ask me.  A web page
 is easier to extend later on, reorganize, categorize, present in
 multiple ways, etc. without increasing the traffic of the list
 immensely.

i couldnt agree more , and the best (plus usefull) ones could included
in a package or in the examples directory
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]