Re: FTPS recommendations?

2005-08-02 Thread J.C. Roberts
On Mon, 01 Aug 2005 20:15:04 -0400, Steve Shockley [EMAIL PROTECTED] wrote: J.C. Roberts wrote: I don't mean to be confrontational but personally I didn't think there was any point in securing anon/public access? Does FTP in SSL/TLS verify certificates? It could be used to verify that the

Re: [Re: FTPS recommendations?]

2005-08-02 Thread Matt R
another potential problem with FTPS vs. SFTP is firewalling. SFTP needs just one port, FTPS needs several, as its really just 'good' ole ftp. And I would certainly be curious how you would proxy an encrypted ftp connection -Matt

Re: [Re: FTPS recommendations?]

2005-08-02 Thread sebastian . rother
another potential problem with FTPS vs. SFTP is firewalling. SFTP needs just one port, FTPS needs several, as its really just 'good' ole ftp. And I would certainly be curious how you would proxy an encrypted ftp connection -Matt You're right but there's no official Solution for SFTP.

Re: FTPS recommendations?

2005-08-02 Thread Bob Bostwick
It would be sweet if we could just simply set the users shell to usr/bin/false to prevent ssh while still allowing scp/sftp. I've got a hunch doing this involves non-trival code changes. That's what I was lead to believe as well. My users will never be connecting

Re: FTPS recommendations?]

2005-08-02 Thread Bob Bostwick \(Lists\)
Just in case you don't know, scponly works great. In our datacenter we need to give users access to ftp but we also need a secure access. Since the users are not allowed to gain SSH access we use the scponly solution. I did not know that, and will look into this

Re: FTPS recommendations?

2005-08-02 Thread Bob Bostwick \(Lists\)
I am implementing an FTP server and need it to use SSL/TLS. I know ftpd doesn't support this, and was wondering if anyone had any suggestions on an alternative. I know SFTP exists, but that is not an option, as the clients are not going to change. I know pure-ftpd supports this, but

Re: FTPS recommendations?

2005-08-01 Thread sebastian . rother
On Mon, 1 Aug 2005 12:49:49 -0500, Bob Bostwick \(Lists\) [EMAIL PROTECTED] wrote: I am implementing an FTP server and need it to use SSL/TLS. I know ftpd doesn't support this, and was wondering if anyone had any suggestions on an alternative. I know SFTP exists, but that is not an

Re: FTPS recommendations?

2005-08-01 Thread J.C. Roberts
On Tue, 2 Aug 2005 00:23:48 +0200 (CEST), [EMAIL PROTECTED] wrote: On Mon, 1 Aug 2005 12:49:49 -0500, Bob Bostwick \(Lists\) [EMAIL PROTECTED] wrote: I am implementing an FTP server and need it to use SSL/TLS. I know ftpd doesn't support this, and was wondering if anyone had any

Re: FTPS recommendations?

2005-08-01 Thread sebastian . rother
On Tue, 2 Aug 2005 00:23:48 +0200 (CEST), [EMAIL PROTECTED] wrote: On Mon, 1 Aug 2005 12:49:49 -0500, Bob Bostwick \(Lists\) [EMAIL PROTECTED] wrote: I am implementing an FTP server and need it to use SSL/TLS. I know ftpd doesn't support this, and was wondering if anyone had any

Re: FTPS recommendations?

2005-08-01 Thread J.C. Roberts
On Tue, 2 Aug 2005 01:10:42 +0200 (CEST), [EMAIL PROTECTED] wrote: On Tue, 2 Aug 2005 00:23:48 +0200 (CEST), [EMAIL PROTECTED] wrote: On Mon, 1 Aug 2005 12:49:49 -0500, Bob Bostwick \(Lists\) [EMAIL PROTECTED] wrote: I am implementing an FTP server and need it to use SSL/TLS. I know

[Re: FTPS recommendations?]

2005-08-01 Thread Rico
I'm sorry but there's no e.g. official AnnonSFTP-Patch/Modification for OpenSSH. As far as I know you're not able to splitt the SFTP from the SSH-Account (I don't mention any unofficial Patchs wich may work). Hi, Just in case you don't know, scponly works great. In our datacenter we need to