Linux - SecurityThis forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.
Notices
Welcome to LinuxQuestions.org, a friendly and active Linux Community.
You are currently viewing LQ as a guest. By joining our community you will have the ability to post topics, receive our newsletter, use the advanced search, subscribe to threads and access many other special features. Registration is quick, simple and absolutely free. Join our community today!
Note that registered members see fewer ads, and ContentLink is completely disabled once you log in.
If you have any problems with the registration process or your account login, please contact us. If you need to reset your password, click here.
Having a problem logging in? Please visit this page to clear all LQ-related cookies.
Get a virtual cloud desktop with the Linux distro that you want in less than five minutes with Shells! With over 10 pre-installed distros to choose from, the worry-free installation life is here! Whether you are a digital nomad or just looking for flexibility, Shells can put your Linux machine on the device that you want to use.
Exclusive for LQ members, get up to 45% off per month. Click here for more info.
Well I don't think you need to worry about changing the ssh login passwords due to the fact that ssh is encrypted. VSFTP on the other hand is not encrypted. On the other hand there are tools that come with the OpenSSH package that allow encrypted file transfers. May I ask what the exact purpose of you ftp server is?
the purpose of my ftp server is that people can transfer their files onto the server and work on the server. the server also hosts a webserver and a database for testing, some dedicated nwn wolf and quake stuff and the backup of my workstation. so i don't want any newbie sniffer to get acces to my server, because of the clear text pwds that are used by ftp!
some of the people who work outside and need to transfer files to my server work under windows so they are not able, or too lazy to use ssh copy or something like that!
so a different ftp password would be of use! because if the ftp password gets hacked only the ftp account and the files there can be accessed
i know proftpd can do this! but proftpd sucks! i want vsftp because of its speed and scalability!
Look into the Vsftp tarball/docs for the PAM sample (/etc/pam.d/vsftp), it uses the PAM module pam_userdb.so which allows you to maintain a separate passwd list.
hmm... i hoped that there is an easier way to do this, instead of handling those pam things! it's quite an involved thing to do so!
-> but i think this is the only way!
if anyone knows an easier way tell me please!
Check out my setup . I think we have similar setups and I let my users use Winscp. Its secure and free. Read the tutorial and it will explain how to set it up.
Last edited by Crashed_Again; 02-14-2003 at 06:48 AM.
LinuxQuestions.org is looking for people interested in writing
Editorials, Articles, Reviews, and more. If you'd like to contribute
content, let us know.