Re: SFTP versus FTP over SSH2

From: Richard E. Silverman (res_at_qoxp.net)
Date: 03/08/05 

Date: 08 Mar 2005 09:42:38 -0500

>>>>> "NKG" == Nico Kadel-Garcia <nkadel@comcast.net> writes:

    NKG> SFTP does not suppurt the commands "mput", "mget", "ls -R", or
    NKG> "ls *.txt". Its user interface is pitiful compared to a real FTP
    NKG> system,...

Let's be clear here: these are properties of some sftp client
implementations. The SFTP protocol supports all these things.

    NKG> contents of the symlinks. It also does not restrict the users to
    NKG> their own directories unless you very carefully build in chroot
    NKG> cages, which the OpenSSH authors have never been willing to
    NKG> incorporate into their source and which the commercial SSH
    NKG> authors do by stupid things like creating a login that is a
    NKG> "chroot shell script". If you don't shudder at that phrase, you
    NKG> should.

This hasn't been true for some time; the Tectia chroot features are
implemented in the server.

>> What SFTP client are you using that supports traditional FTP over
>> SSH?

    NKG> Yeah, this has me confused too.

As I mentioned in an earlier post, several SSH clients do this in
different ways, including Tectia and VanDyke SecureFX. 

-- 
  Richard Silverman
  res@qoxp.net

Relevant Pages

  • Re: SFTP versus FTP over SSH2
    ... > NKG> system,... ... these are properties of some sftp client ... client to the OpenSSH server did not last time I tried it last year, ...
    (comp.security.ssh)
  • Re: cant turn off ssh password access on my new solaris box
    ... NKG> Richard, are we anywhere near the point where SSH 1 should be ... NKG> disabled by default in sshd_config? ... since its weak key exchange allows the client to force an insecure ...
    (comp.security.ssh)
  • Re: SSH1 FTP client for Windows
    ... NKG> nailed to the SSH2 protocol. ... That looks like your SSH client is configured to do protocol 2 only. ... SFTP protocol supports such an operation, ...
    (comp.security.ssh)
  • Re: Proposed enhancement to scp
    ... NKG> handling of connections with background jobs running, ... NKG> plethora of other useful features. ... the remote host -- and by default, this is "ssh", which gives it security. ...
    (comp.security.ssh)
  • Re: Connecting from a Windows client to remote Unix Server with passwordless authentication
    ... NKG> Prachet wrote: ... >> to a remote Unix server with passwordless authentication.The User ... What the SSh Secure Shell client ... NKG> Windows client setups, or have it in their documentation. ...
    (comp.security.ssh)