Re: Need for SFTP package, including API

From: Darren Tucker (dtucker_at_dodgy.net.au)
Date: 01/20/04

  • Next message: Donald V: "Re: Need for SFTP package, including API"
    Date: Tue, 20 Jan 2004 04:08:49 +0000 (UTC)
    
    

    In article <8OOcnSZuitpwPJHdXTWc-g@speakeasy.net>,
    Donald V <ask-me-later@maybe.com> wrote:
    >I have been doing research on Secure FTP for a future business client. =
    >They wish to implement SFTP for document transport, and I will be =
    >writing C++ code under Windows to manage it.
    >
    >>From the research I've done already, it seems most sftp server packages
    >are proprietary but conform to the standard (RFC 2228).

    First, be sure of what you want. RFC2228 is the security extension to
    the normal FTP standard which it nothing to do with the sftp command/
    protocol that's part of SSHv2 (except confusingly using the same acronym).

    Compare:
    ftp://ftp.rfc-editor.org/in-notes/rfc2228.txt
    http://www.openssh.com/txt/draft-ietf-secsh-filexfer-02.txt

    (See also: http://www.ietf.org/html.charters/secsh-charter.html)

    Assuming you want SSH's sftp, read on. Otherwise, you'll need to
    ask elsewhere.

    >I know that
    >OpenSSH provides a free sftp server but I can't find a version for
    >Win32, and it seems that it doesn't port to Win32 well. (Ultimately
    >this Win32 server requirement may not be necessary.)

    OpenSSH compiles on Cygwin out-of-the-box (barring bugs) and Redhat
    provide OpenSSH-on-Cygwin binaries. The clients (ssh/scp/sftp) work
    fine as-is, the server requires some setup but also works.

    Someone recently posted details of a patch to port OpenSSH to Interix
    (aka Microsoft Services For Unix). Apparently the server also works
    although I haven't tried this at all:
    http://marc.theaimsgroup.com/?l=openssh-unix-dev&m=107432737615627

    -- 
    Darren Tucker (dtucker at zip.com.au)
    GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4  37C9 C982 80C7 8FF4 FA69
        Good judgement comes with experience. Unfortunately, the experience
    usually comes from bad judgement.
    

  • Next message: Donald V: "Re: Need for SFTP package, including API"

    Relevant Pages

    • Re: SPAM sudden increase
      ... > Dude was on a tech call with f-secure and the tech asked, "So, ... dude is trying to FTP to their server using WSFTP. ... but I think he is talking about sftp protocol - FTP via ...
      (alt.2600)
    • using java with sftp
      ... JCraft JSch package to SFTP files. ... //First Create a JSch session ... System.err.println("Unable to connect to FTP server. ...
      (comp.lang.java.programmer)
    • Re: using java with sftp
      ... JCraft JSch package to SFTP files. ... //First Create a JSch session ... System.err.println("Unable to connect to FTP server. ...
      (comp.lang.java.programmer)
    • sftp on OpenSSH
      ... I have an existing server running OpenSSH 3.4p1. ... non-commercial ssh client version 3.1.0 to scp files to it regularly. ... the usage of sftp: ...
      (comp.security.ssh)
    • Re: sftp password authentication question
      ... > I have a W2k server machine (equippend with SSH Secure Shell) which ... > NetworkSimplicity SSH server). ... > can be apparently easily accomplished with normal FTP. ... > this to work with SFTP or SFTP2 ??? ...
      (comp.security.ssh)