Re: login.conf for securing ftp

2006-03-28 Thread Joachim Schipper
On Mon, Mar 27, 2006 at 05:54:50PM +0100, Mike Gould wrote: > Ok I realised I asked the question the wrong way round. > Anyone prepared to say that this looks ok? :) No, but I don't see any obvious flaws, aside from ssh via private/public keys or somesuch, but you are already aware of that.

Re: login.conf for securing ftp

2006-03-27 Thread Mike Gould
Ok I realised I asked the question the wrong way round. Anyone prepared to say that this looks ok? :) Mike Mike Gould wrote: Hi, and anyone comment on the security and efficiency of the following plan? I want to allow some users to share some files via ftp. Now since ftp sends passwords in p

login.conf for securing ftp

2006-03-26 Thread Mike Gould
Hi, and anyone comment on the security and efficiency of the following plan? I want to allow some users to share some files via ftp. Now since ftp sends passwords in plaintext I've chroot'd ftp and tried to prevent that password from also being used to access the account in any other way. Also