Re: anonymous sftp?

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Mon, 12 May 2003, Oscar Knight wrote:

knight >I want to setup an anonymous sftp account!  IE, a password auth account
knight >with a null password.  NO shell access.  Permission to read/get a
knight >directory structure/files and possibly also put files.   Is this possible?
knight >What ssh flavor should I use?  If possible, I would like to use OpenSSH.
knight >
knight >In general I'm wondering if it's possible to replace anonymous ftp with
knight >some form of anonymous sftp.  I realize that this requires all user's of
knight >the "site" to potentially install some additional software.

use SSL/TLS with an appropriate FTP server, and allow only secure connection to your server.

then your users will just need to update their ftp client to support ssl/tls.

Best Regards,

Eric.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (FreeBSD)

iD8DBQE+wNe7L/U5psk9l1gRAlpMAJ4uudHLF0y4Dlbv8FSqBV238zZacACgg0FB Ie5vfyb/gR/hQ0hwdGRdqD4=
=TVz0
-----END PGP SIGNATURE-----
Received on Tue May 13 11:36:09 2003

Do you need help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related securityfocus.com Links bugtraq certification focus-bsd focus-ids focus-ih focus-linux focus-ms focus-sun focus-unix-other focus-virus forensics incidents libnet linux-secnews ms-secnews pen-test secpapers secprog sectools secureshell security-basics securityjobs sf-news vuln-dev webappsec Request more information about Pantek