- WLUG - wlug.mailman3.com

Re: [Wlug] proftpd off the map?

by Chuck Anderson

On Fri, Mar 14, 2008 at 11:24:59AM -0400, John Stoffel wrote: > >>>>> "Brian" == Brian J Conway <bconway(a)alum.wpi.edu> writes: > > >> Now maybe I'm a little out of date, I'd love to know that more recent > >> versions of OpenSSH support chroot'd sftp jails. > > Brian> Actually, there is recent development on that front: > > Brian> http://undeadly.org/cgi?action=article&sid=20080220110039 > > Brian> I don't believe it's part of any release of OpenSSH yet, but > Brian> presumably soon. > > Interesting. I'm still interested in the scp option though, since > that's just as easy for user to use, and just as secure as sftp from > what I see. I'd figure if you just did a static linking, you'd be all > set. > > The key, to me, is to automate the setup of the jails and then you're > done. Don't make it a manual process at all. Check this thread for a sftp-only chroot solution: http://www.mail-archive.com/misc@openbsd.org/msg29106.html

March 14, 2008

Re: [Wlug] proftpd off the map?

by John Stoffel

>>>>> "Brian" == Brian J Conway <bconway(a)alum.wpi.edu> writes: >> Now maybe I'm a little out of date, I'd love to know that more recent >> versions of OpenSSH support chroot'd sftp jails. Brian> Actually, there is recent development on that front: Brian> http://undeadly.org/cgi?action=article&sid=20080220110039 Brian> I don't believe it's part of any release of OpenSSH yet, but Brian> presumably soon. Interesting. I'm still interested in the scp option though, since that's just as easy for user to use, and just as secure as sftp from what I see. I'd figure if you just did a static linking, you'd be all set. The key, to me, is to automate the setup of the jails and then you're done. Don't make it a manual process at all. John

March 14, 2008

Re: [Wlug] proftpd off the map?

by Tim Keller

In a nutshell... I'm using ftp right now (proftpd) and I have it configured the way I want and it works well... I just wanted to update to the latest version or see if there were any security updates and found the website unaccessible... As for the chroot features... I currently use them for proftpd and I purchased the commercial version of SSH that includes chroot. I'm psyched to see that they'll be supporting it soon since it's a feature I look for. However, my current plan is to reimplement my current configuration using vsftpd, because at least in my eyes, vsftpd is a known quantity and under development. On Thu, Mar 13, 2008 at 2:06 PM, Brian J. Conway <bconway(a)alum.wpi.edu> wrote: > On Thu, 13 Mar 2008, John Stoffel wrote: > > > > > Aaron> On a slight tangent: Do you have a specific need for ftp? I'd > > Aaron> suggest looking into using sftp instead (the s stands for > > Aaron> secure). It's available as part of openssh. > > > > The problem with sftp is that it doesn't offer chroot() style jails > > for ftp users and accounts. This can be worked around using the > > scponly hack which is out on the net. > > > > Now maybe I'm a little out of date, I'd love to know that more recent > > versions of OpenSSH support chroot'd sftp jails. > > Actually, there is recent development on that front: > > http://undeadly.org/cgi?action=article&sid=20080220110039 > > I don't believe it's part of any release of OpenSSH yet, but presumably > soon. > > Brian J. Conway > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug > -- I am leary of the allegiances of any politician who refers to their constituents as "consumers".

March 13, 2008

Re: [Wlug] proftpd off the map?

by Brian J. Conway

On Thu, 13 Mar 2008, John Stoffel wrote: > > Aaron> On a slight tangent: Do you have a specific need for ftp? I'd > Aaron> suggest looking into using sftp instead (the s stands for > Aaron> secure). It's available as part of openssh. > > The problem with sftp is that it doesn't offer chroot() style jails > for ftp users and accounts. This can be worked around using the > scponly hack which is out on the net. > > Now maybe I'm a little out of date, I'd love to know that more recent > versions of OpenSSH support chroot'd sftp jails. Actually, there is recent development on that front: http://undeadly.org/cgi?action=article&sid=20080220110039 I don't believe it's part of any release of OpenSSH yet, but presumably soon. Brian J. Conway

March 13, 2008

Re: [Wlug] proftpd off the map?

by John Stoffel

Aaron> Tim Keller wrote, on Mar 12, 2008 at 11:16 EDT: >> Hey Gang, >> >> Has anyone else noticed that proftpd seems to be off the map now? I've >> tried going to their web page to check for latest version / bug fix and I >> can't seem to get there... >> >> I guess I'll be upgrading to vsftpd... Aaron> On a slight tangent: Do you have a specific need for ftp? I'd Aaron> suggest looking into using sftp instead (the s stands for Aaron> secure). It's available as part of openssh. The problem with sftp is that it doesn't offer chroot() style jails for ftp users and accounts. This can be worked around using the scponly hack which is out on the net. Now maybe I'm a little out of date, I'd love to know that more recent versions of OpenSSH support chroot'd sftp jails. I know this mostly because I needed to integrate sftp into an existing proftpd setup, without changing the directory structure and how it works. Not hard, just took testing and some setup scripts to build proper hardlinks. John

March 13, 2008

Re: [Wlug] proftpd off the map?

by Aaron Haviland

Tim Keller wrote, on Mar 12, 2008 at 11:16 EDT: > Hey Gang, > > Has anyone else noticed that proftpd seems to be off the map now? I've > tried going to their web page to check for latest version / bug fix and I > can't seem to get there... > > I guess I'll be upgrading to vsftpd... On a slight tangent: Do you have a specific need for ftp? I'd suggest looking into using sftp instead (the s stands for secure). It's available as part of openssh. -- Aaron Haviland 34 Wayne Ave, Dudley, MA home: [508] 943 - 7974

March 12, 2008

proftpd off the map?

by Tim Keller

Hey Gang, Has anyone else noticed that proftpd seems to be off the map now? I've tried going to their web page to check for latest version / bug fix and I can't seem to get there... I guess I'll be upgrading to vsftpd... Thanks, Tim. -- I am leary of the allegiances of any politician who refers to their constituents as "consumers".

March 12, 2008

Re: [Wlug] looking for Andy

by Mike Frysinger

On Thursday 06 March 2008, Maly, Doug wrote: > Hi - I lost Andy's email - please have him reply. > > Thanks, > Doug > (the guy that was running Mint Linux on my son's EeePC) mailing list archive on wlug.org says "andystewart at comcast.net" -mike

March 8, 2008

looking for Andy

by Maly, Doug

Hi - I lost Andy's email - please have him reply. Thanks, Doug (the guy that was running Mint Linux on my son's EeePC) Douglas Maly -- ND1D Allegro MicroSystems 115 Northeast Cutoff Worcester, MA 01606 phone: 508-854-5739 fax : 508-853-2431 email: dmaly(a)allegromicro.com

March 7, 2008

Re: [Wlug] looking for mySql setup info

by eric

John Stoffel wrote: >>>>>> "kstratton" == kstratton <kstratton(a)fastmail.us> writes: >>>>>> > > kstratton> Yes, that looks like where I started > kstratton> (http://gentoo-wiki.com/HOWTO_Setup_MythTV) > > >>> From the wiki, I found that I need mysql working first. I used: >>> > > kstratton> http://www.gentoo.org/doc/en/mysql-howto.xml > > kstratton> 1)emerge -DuN mySql builds fine > kstratton> emerge --config =dev-db/mysql-5.0.54 seems to execute as I would > kstratton> expect > > Yeah, that's probably what you wanted. > > kstratton> 2) /etc/init.d/mysql start was run before I tried 'mysql -u > kstratton> root -h localhost -p'. I get an access error with 'mysql > kstratton> -u root -h localhost -p'. I know I will eventually have to > kstratton> 'rc-update add /etc/init.d/mysql' once I get this working. > > Here's the problem, what error are you getting? If you can't get the > mysql client to talk to the server, then you're stuck. Have you > confirmed that the server is running? > > ps -ef |grep mysql > > Also, look in /var/log/ for a mysql directory or log file to examine. > > kstratton> What I am looking for is a guide for mysql so that instruct > kstratton> me how to manually configure the installed mySql to the > kstratton> point of getting a working mysql prompt (independent of > kstratton> linux distribution). This will give me idea of the > kstratton> configuration files for mysql and possibly allow me to > kstratton> figure out what is broken with the setup. > > kstratton> I guess my next step is to do some reading at > kstratton> http://dev.mysql.com/doc/. For me, linux is just a hobby, > kstratton> so this may take awhile. IF I figure what is causing my > kstratton> trouble, I will try to give a good description of the > kstratton> problem/solution. With my luck, 'emerge --sync;emerge > kstratton> world -DuN' will fix this before I get a chance to figure > kstratton> what is going on.... > > The mysql.com docs will probably help you alot, but so should the > gentoo docs as well. I forget what the default password for mysql is, > but you can certainly google for 'reset mysql root password' and learn > how you can start mysql is safe-mode without any password protection > so you can reset the privs. > Gentoo doesn't provide a default password, it tells you to set it yourself.

March 6, 2008