AFP548 Changing the world one server at a time.

OS X Server, disable plain (insecure) FTP.

Home › Forums › OS X Server and Client Discussion › File Serving › OS X Server, disable plain (insecure) FTP.

Viewing 3 posts - 1 through 3 (of 3 total)
  • Author
    Posts
  • March 1, 2006 at 12:45 am #365483
    hostfoil
    Participant

    Hi all,

    I’m running OS X Server 10.4 on an Xserve with Mac/PC clients accessing a dozen or so dynamic websites via AFP/FTP/SFTP.

    For security reasons, I would like to disable plain FTP but still allow Secure FTP (at least the kind that runs on port 22).

    Right now, I’ve just got port 21 blocked at the firewall. That obviously works, but doesn’t seem very clean.

    Thanks

    March 3, 2006 at 7:43 am #365523
    hostfoil
    Participant

    Hi, thanks for your help.

    If I followed you correctly… I set a user’s Login Shell from WM Advanced tab, to the SFTP binary. Interestingly enough, it worked and he was unable to login w/ Transmit and FTP.

    So that’s cool, but I still don’t really like the idea of FTP as a service running at all (maybe it’s a minor thing?), any other suggestions?

    Thanks again.

    March 16, 2006 at 5:06 pm #365718
    justinph
    Participant

    Can’t you just turn off the FTP service in server admin? If a user has a shell set and remote login is on, SFTP (really just ssh) should work just fine.

    SFTP isn’t FTP at all. It’s just FTP-like and done over SSH.

  • Author
    Posts
Viewing 3 posts - 1 through 3 (of 3 total)
  • You must be logged in to reply to this topic.