LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Security (https://www.linuxquestions.org/questions/linux-security-4/)
-   -   ssh / ssl ftp server (https://www.linuxquestions.org/questions/linux-security-4/ssh-ssl-ftp-server-655504/)

eRJe 07-13-2008 03:00 PM

ssh / ssl ftp server
 
Hi,

I was hoping someone could clear some things up for me.

I have vsftpd running and configured to use SSL. This works fine, clients can logon through SSL and will be rejected without. But now I recently discovered that I can also logon to my ftp server through SSH. How does this work because I don't recal configuring the server for sftp.

Also, which of the two would be more secure?

Thanks,
Robbert

simonapnic 07-13-2008 05:47 PM

Quote:

SFTP is not just FTP run over SSH, but rather a new protocol designed from the ground up by the IETF SECSH working group. It is sometimes confused with Simple File Transfer Protocol.
In other words, it has nothing to do with your FTP server. It requires SSH access on your box and they can use those credentials to use it like a FTP account.
More information here:
http://en.wikipedia.org/wiki/SSH_file_transfer_protocol

About security, I'd say SFTP is more secure since it's based on SSH's security.
But, it's not as easy to use I guess as a FTP daemon.

eRJe 07-14-2008 02:24 PM

Hi simonapnic,

Thanks for your reply!

OK I definitally misunderstoot the wiekies cuz I thought they said sftp is ssh over ftp. Must have read it with to much rush. Anyway thanks for clearing that up.

So in other words you are saying I don't have to install a FTP server like vsftpd to connect to my server through sftp. They only thing is that it isn't a "real" ftp connection it only looks like one (GUI)? What is the difference between sftp and ftp?

What advantages will I have using vsftpd (with SSL) above sftp?

Best regards,
Robbert

jamesapnic 07-15-2008 09:55 PM

Just incase you want to disable it, drop this line from sshd_config

Quote:

Subsystem sftp /usr/lib/openssh/sftp-server
Its kind of synonymous to ftp over ssh, as in it does the same job, but completely different protocol.

ashsethi 07-16-2008 06:53 AM

Wanted to reply but i think you got the best of replies already !!
Let us know incase any issues mate.

Cheers
Ash

eRJe 07-16-2008 04:58 PM

Hi,

Thanks to everyone who replied!

I guess if you don't really need special features during ftp sessions, sftp is a fine solution? Its save and doesn't require any extra deamon to run. Only thing is you will have to install a sftp client instead of the (standard) ftp client.

Thanks again!

Best regards,
Robbert


All times are GMT -5. The time now is 09:57 AM.