View Single Post
  #4 (permalink)  
Old 22-Sep-2006, 18:04
Jim Pye
Guest
 
Posts: n/a
Default Re: Need your suggestions on Apache and VSFTPD

David wrote:

> Hello Jim:
>
> I'd appreciate any help or pointers you could provide.
>
> Thanks.


David

ssh is the secure shell, It runs as a daemon on the server and has client
components the run on the client.

ssh is the preferred replacement for telnet as it uses encryption which
telnet does not.

The ssh daemon has several additional features which allow it to perform he
functionality of other client/server functions, one of these is FTP (SFTP
to be exact)

To configure this we need to confirm a few things.

First off we need to check that sshd has been loaded and enabled on the
webserver. For SuSE this is the default, but you may have disabled it
during installation or not enabled the firewall port etc.

As root on the box running the webserver if you run the command:

chkconfig -l sshd

(the switch is a el for lima)

it should report:

sshd 0ff 1ff 2ff 3n 4ff 5n 6ff

If not, we need to get sshd running at boot up. Run:

insserv sshd

which should take care of this.

Next we need to confirm that the sftp server is configured to start when
sshd does.

less /etc/ssh/ssd_config

and look for the lines:

# override default of no subsystems
Subsystem sftp /usr/lib/ssh/sftp-server

If this line exists then the sftp server should be run when the correct call
is made to the sshd daemon.

If the sshd is not running, either reboot the server to make the start
script activate due to the insserv command above or run:

/etc/init.d/sshd

Now from an FTP client (I have only configured FileZilla on a windows box,
long story, but any client that supports sftp will work)

Setup an account that uses SFTP Using SSH2 to connect to the server.

Note that if this server is going to be available to the outside world it
pays to change the default ssh port. In the /etc/ssh/sshd_config file the
Port line allows this to be changed from the default 22 to some other
value. Change the client port in the account to match.

HTH

Let me know if more details are required.

Jim

--
Pye, James Pye, chmod 007
The Ultimate Open Source