maxwell at umiacs.umd.edu wrote: > We would like to install the FTP plugin for XMLmind Professional Edition. > Our IT folks have an understandable concern: does this plugin implement > SFTP (SSH FTP)?
No. Our "FTP virtual drive plug-in" just supports plain old FTP, not SFTP and not FTPS. (Note that SFTP or SSH File Transfer Protocol is absolutely not related to FTP. It is FTPS or FTP/SSL which has a relationship with FTP.) However because your need is not uncommon, we have added "support for SFTP and FTPS" to our TODO list (but with a low priority). > Unless it does, IT doesn't want to use it because of the > security hole (and I guess I have to say I agree). OK. > There's also a "WebDAV virtual drive plug-in" which apparently allows > https (but not sftp) access, but neither the IT person I spoke to, nor I, > knows what that is... This one should be fine for your purpose. > and the Wikipedia article on it makes it look like > Windows support for WebDAV is shaky at best. I just checked our Linux > machine; it has 'cadaver' (who chose that name??), a WebDAV client, but > it's not clear what you have to do to set up a WebDAV server on Linux. You need to setup a WebDAV *server* over HTTPS. Forget about Windows shaky ``Web Folders'' and about Linux "cadaver". These are WebDAV *clients*. We don't care about clients since XXE has an integrated WebDAV client called "WebDAV virtual drive plug-in". The easiest way to get a production-quality WebDAV server over HTTPS is to install Apache + mod_dav + all needed modules. Also tell your IT staff to install a *real* *certificate* (i.e. not a self-signed cerficate, but rather a certificate signed Verisign, Thawte, etc) on this Apache server, otherwise XXE (that is, Java) will reject your server with a crytic error message.
