On Thu, 6 Feb 2014, Tim Evans wrote:
> On 02/06/2014 05:38 PM, Robert P. J. Day wrote:
> >
> > again, reading RHEL 7-beta docs and here:
> >
> > https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux/7-Beta/html/System_Administrators_Guide/s1-ssh-configuration.html
> >
> > one reads:
> >
> > "For SSH to be truly effective, using insecure connection protocols
> > should be prohibited. Otherwise, a user's password may be protected
> > using SSH for one session, only to be captured later while logging in
> > using Telnet. Some services to disable include telnet, rsh, rlogin,
> > and vsftpd."
> >
> > never having used sftp before, i'm confused ... isn't sftp simply a
> > secure ftp client? and if so, why would one want to disable vsftpd? i
> > would still need an ftp server, would i not? can someone clarify what
> > that passage is saying? thanks.
>
> Actually 'sftp' is a special interface to ssh that looks and acts
> like ftp, but doesn't use the ftp protocol. You do not need to
> maintain a vsftpd server to support folks using sftp.
yes, i realize that now ... having never used sftp before and based
on something i clearly misread, i had assumed sftp was simply a more
secure ftp client to talk to an *existing* ftp server; i know better
now.
and as for the admonition to *not* read RHEL 7 docs, given that RHEL
7 will allegedly be based on fedora 19 (more precisely, what appears
to be a mix of fedora 18, 19, and 20), i would think that the current
RHEL 7 beta docs online should at least be moderately relevant with
respect to fedora.
rday
--
========================================================================
Robert P. J. Day Ottawa, Ontario, CANADA
http://crashcourse.ca
Twitter: http://twitter.com/rpjday
LinkedIn: http://ca.linkedin.com/in/rpjday
========================================================================
--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org
