Subject: Re: Secure FTP server
To: Mariani, Robert \(AU - Melbourne\) <rmariani@dc.com>
From: David S. <davids@idiom.com>
List: netbsd-users
Date: 03/19/2002 16:13:11
> I am a new user and have found plenty of Howto's in regards to
> setting up a FTP server for anonomous users, but i would like to set up a
> secure FTP server that accepts a Username and Password. Idealy this FTP
> would let me get things from it and upload stuff. I would like to use my
> local login name and password: eg Robert and password 12345. There would be
> multiple users accessing the FTP the same way. Any suggestions on Syntax
> for setting it up?
Ordinary FTP is not terribly secure, as it transmits your password in
clear text, and data unencrypted. NetBSD comes with 'sftp' (which
isn't really FTP, but 'ssh' disguised to look like it), which is rather
more secure. Or, you could use ordinary FTP with 'ssh' port-forwarding
(see man ssh). If you want to install a third-party "secure" FTP, some
to look at are
Kerber-ized FTP: http://www.pdc.kth.se/heimdal/
SafeTP: http://safetp.cs.berkeley.edu/
Secure FTP: http://security.sdsc.edu/software/secureftp/
SRP FTP: http://srp.stanford.edu
GridFTP: http://www.globus.org/datagrid/gridftp.html
You can probably find others with a bit of searching.
David S.