Koozali.org: home of the SME Server

Legacy Forums => Suggestions => Topic started by: Thomas V. on November 10, 2002, 06:26:05 PM

Title: Secure FTP
Post by: Thomas V. on November 10, 2002, 06:26:05 PM

First off I’d like to thank everyone that make the free download/usage of e-smith possible!

I have a small suggestion. - How about a Public Secure FTP Access option?

I’m on a local network with 200-300 (season depended) other fellow IT students. This kind of environment sees a lot of network sniffers. As a result I have closed my FTP. But with a SFTP there would be no problem. I have previously used SFTP on a FreeBSD with great success. But the time and knowledge it takes to maintain a system of this kind, to keep unwanted guests out is far beyond what I can muster. So the SME is a heaven send solution. But FTP Access is my primary reason for keeping a server running. And I REALLY miss that option.

Thomas.

Title: Re: Secure FTP
Post by: robert on November 12, 2002, 08:39:40 PM

SME already includes a secure ftp server. This is a subserver of the ssh server.
Go to the remote access panel in the server-manager and enable ssh access. You now have an sftp server waiting for connections.
For windows clients, the free for non-commercial use ssh client available from www.ssh.com comes with an sftp client.
For mac clients, the author of MacSSH has written a commercial, but inexpensive, sftp client called MacSFTP.
For Unixes, the most common client is called simply sftp and is included in openssh-clients.

Title: Re: Secure FTP
Post by: Thomas V. on December 07, 2002, 02:45:40 PM

Thanks!

Things work great now.

Now why didn’t I figure that out myself  ;)
Have fun!
Thomas.

Title: Re: Secure FTP
Post by: Harris on January 03, 2003, 05:30:58 PM

Is that SFTP server listening on port 21 or what?

Title: Re: Secure FTP
Post by: zoikz on January 04, 2003, 10:44:11 PM

>Author: Harris (jannis_AT_home.nl)
>Date:   01-03-03 09:30

>Is that SFTP server listening on port 21 or what?
no its listening on the default ssh port (22) but you'll still need an sftp client (normal ftp clients can't understand the encryption) which will use port 22 by default

Title: Re: Secure FTP
Post by: David Yip on March 03, 2003, 10:32:06 AM

Dear all:

Is it possible to change the starting directory for the SFTP Client like FTP?


David Yip

Title: Re: Secure FTP
Post by: David Yip on March 04, 2003, 08:14:07 PM

Dear All:

I mean that change the user's root directory in Server side for SFTP.

Thanks

Title: Re: Secure FTP
Post by: Mike on March 21, 2003, 02:30:06 PM

Hi everyone

Have got a problem trying to get an sftp connection.
I get the following:
*************************************************************************
Finding Host www.mydomain.com ...
Connecting to 111.222.333.444:22
Connected to 111.222.333.444:22, Waiting for Server Response
Server Welcome: SSH-1.99-OpenSSH_3.1p1
Client Version: SSH-2.0-WS_FTP-7.6-2002.08.23
Signature Verified
Session Keys Created
Ciphers Created
New Client->Server ciphers in place.
New Server->Client ciphers in place.
Completed SSH Key Exchange. New Keys in place.
User Authenticated OK!
Completed SSH User Authentication.
Started subsystem "sftp" on channel e9d8868f
Received channel request "exit-status" status(1), for channel e9d8868f
Received channel close/eof(0x60) message for channel e9d8868f
Error 842c0000 receiving sftp packet
error 842c0000 initializing sftp protocol
Sending channel close message for channel e9d8868f
SSH Transport closed.
*************************************************************************
SSH authentication seems to be O.K. but then sftp is starting on a subsystem.
If I read this right then my E-smith box apperently sends an exit command.
Have never worked with sftp but would like to shield my passwords from showing up on sniffers.

Some of you guys have any idea's?