In a nutshell...

I'm using ftp right now (proftpd) and I have it configured the way I want and it works well... I just wanted to update to the latest version or see if there were any security updates and found the website unaccessible...

As for the chroot features... I currently use them for proftpd and I purchased the commercial version of SSH that includes chroot. I'm psyched to see that they'll be supporting it soon since it's a feature I look for.

However, my current plan is to reimplement my current configuration using vsftpd, because at least in my eyes, vsftpd is a known quantity and under development.

On Thu, Mar 13, 2008 at 2:06 PM, Brian J. Conway <bconway@alum.wpi.edu> wrote:
On Thu, 13 Mar 2008, John Stoffel wrote:

>
> Aaron> On a slight tangent: Do you have a specific need for ftp? I'd
> Aaron> suggest looking into using sftp instead (the s stands for
> Aaron> secure). It's available as part of openssh.
>
> The problem with sftp is that it doesn't offer chroot() style jails
> for ftp users and accounts.  This can be worked around using the
> scponly hack which is out on the net.
>
> Now maybe I'm a little out of date, I'd love to know that more recent
> versions of OpenSSH support chroot'd sftp jails.

Actually, there is recent development on that front:

http://undeadly.org/cgi?action=article&sid=20080220110039

I don't believe it's part of any release of OpenSSH yet, but presumably
soon.

Brian J. Conway
_______________________________________________
Wlug mailing list
Wlug@mail.wlug.org
http://mail.wlug.org/mailman/listinfo/wlug



--
I am leary of the allegiances of any politician who refers to their constituents as "consumers".