Re: Enabling SSH only for ftp (not for telnet possible) ?
- From: John Thompson <john@xxxxxxxxxxxxxxxxxx>
- Date: Tue, 12 Dec 2006 00:05:57 GMT
On 2006-12-10, Peter Meister <pmeister2@xxxxxxxxx> wrote:
I want to offer encrypted ftp transfers to my server for some users.
The user should be able to use (win)scp to transfer files to my server.
However it is often said that granting SSH access is a security risk
for telnet.
Hmm, I am not sure. I thought I could grant SSH to a user for only his ftp connections.
Or does SSH mean: all or nothing: SSH for FTP AND telnet or no SSH at all?
Do I need full SSH permissions to use scp?
scp and sftp are simply different front-ends to ssh. scp gives ssh a cp
(*nix "copy") work-alike interface, while sftp gives ssh an ftp-like
interface. It is still just ssh behind the scenes doing the actual work
of transferring the files. If ssh, scp, and sftp are invoked by
different executables (as they are under Cygwin, for example), you could
simply delete or modify the permissions on the ssh.exe executable to
deny regular ssh access. WinSCP3 rolls all three functions into single
executable, though.
--
John (john@xxxxxxxxxxx)
.
- Prev by Date: Securing OpenSSH on Windows 2003 Server
- Next by Date: Does Public Key Authentication offer additional security over SSH/SFTP
- Previous by thread: Re: Enabling SSH only for ftp (not for telnet possible) ?
- Next by thread: Re: Enabling SSH only for ftp (not for telnet possible) ?
- Index(es):
Relevant Pages
|