Jump to content

Secure Ftp


Recommended Posts

  • 2 weeks later...

I just wanted to quickly comment on this as well. I would certainly like to have a way of securely uploading batches of multiple files to my account. Sending my full account password in the clear every single time I upload a file makes me just a bit worried that sooner or later, someone is going to compromise it.

 

As an interim step, I now have each subdomain of my site use a different FTP account with a different passsword, so that if one one password is compromised the attacked doesn't gain control over my entire site - and, when I only have a few files, I usually log in through CPanel.

 

I guess my question is, will TCH ever support some method for secure drag-and-drop uploading? Or are the current solutions as good as it's going to get?

Link to comment
Share on other sites

I guess I'll have to bug them, then... B)

 

I just keep thinking that someone's got to be able to figure out a way to do something like FTP securely that doesn't require a shell-based login.

Link to comment
Share on other sites

  • 2 years later...

Hello all, I've been a TCH customer for a few months now. Everything has worked fine so far,

although I miss the ability to manager my files in batch mode.

The "File Manager" in the cpanel is fine to do a couple of operations... but if you want to operate on many files at once, it is very cumbersome. (for instance, if I want to select many individual files from a folder to delete them).

 

Implementing SFTP access for TCH customers, while forbidding SSH access is not very difficult:

In this guide they show how to do it: http://www.debian-administration.org/articles/94/print

 

Basically, as root:

One time operation: Add the sftp-server as a valid shell:

echo '/usr/libexec/openssh/sftp-server' >> /etc/shells

Per user operation: assign sftp-server as the shell of the user:

usermod -s /usr/libexec/openssh/sftp-server username

 

THen again, I know it is not as simple as doing this for a bunch (or all) of TCH accounts; you first need to study the impact

on performance, and I do not know whether accounts are really unix-based accounts at the moment.

 

I hope to see secure FTP access (SFTP) available in TCH soon! :)

 

Cheers,

 

--

Pedro Soria-Rodriguez

http://www.megaspora.net

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Unfortunately, your content contains terms that we do not allow. Please edit your content to remove the highlighted words below.
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

×
×
  • Create New...