Re: sftp vs ftp with ssl

From: Ido Breger (securityfocus_at_magnifire.com)
Date: 08/08/03

  • Next message: Adam Newhard: "Re: SSH mail server experiments"
    To: <lapies@poczta.onet.pl>, <security-basics@securityfocus.com>
    Date: Fri, 8 Aug 2003 10:12:30 +0200
    
    

    Try to add /sbin/nologin to /etc/shells
    When you add a user, change his shell in /etc/passwd to /sbin/nologin

    ----- Original Message -----
    From: "Skibi de LaPies" <lapies@poczta.onet.pl>
    To: <security-basics@securityfocus.com>
    Sent: Friday, August 08, 2003 12:30 AM
    Subject: RE: sftp vs ftp with ssl

    > -----Original Message-----
    > From: Bryan S. Sampsel [mailto:bsampsel@libertyactivist.org]
    > Sent: Thursday, August 07, 2003 3:08 PM
    > To: security-basics@securityfocus.com
    > Subject: Re: sftp vs ftp with ssl
    >
    > Another one question in this topic - for sftp services one need a shell
    > account with interactive shell. If I don't want to allow users to login
    but
    > I want to use sftp then what should I do?
    > (of course i may be wrong, but I haven't found the way to do that)
    >
    > bests
    > vermin
    >
    >
    > --------------------------------------------------------------------------
    -
    > --------------------------------------------------------------------------

    --
    >
    ---------------------------------------------------------------------------
    ----------------------------------------------------------------------------
    

  • Next message: Adam Newhard: "Re: SSH mail server experiments"

    Relevant Pages

    • Disallow shell access but not sftp?
      ... shell but still allow them to make a secure login for ftp? ... this person to have ftp access but not, specifically, have the ability ... I tried changing their shell to a variety of bogus ... and discovered at that point that sftp must allow ...
      (RedHat)
    • Re: SFTP Information, technical, white paper etc.
      ... I wonder what you mean by SFTP. ... Transfer Protocol plus there may be information about it at ... FTP over a SSL connection. ...
      (microsoft.public.dotnet.general)
    • SUMMARY: Non-interactive sftp
      ... whilst not allowing an interactive shell for this use. ... I had neglected to consider that sftp is simply an ssh subsystem - ... All of my research has led me to believe this is a permissions ... permissions on the mount-point where the destination filesystem ...
      (SunManagers)
    • Re: SFPT With Windows 2000 Server?
      ... FTPS is FTP with SSL, but I don't think that IIS natively supports it ... > come with SFTP ... Is it different for Windows Server ...
      (microsoft.public.inetserver.iis.security)
    • Re: sftp and shell access
      ... So far I've tried setting their shell ... sftp uses a ssh connection to tunnel to ftp. ... Clients for ftps or sftp are not always easy to find. ...
      (freebsd-questions)