The UNIX and Linux Forums  

Go Back   The UNIX and Linux Forums > Operating Systems > AIX
.
google unix.com




View Single Post in the UNIX and Linux Forums - Click on the Thread or Permalink to View Entire Thread -->
  #16 (permalink)  
Old 10-17-2008
bakunin bakunin is offline Forum Staff  
Bughunter Extraordinaire
  
 

Join Date: May 2005
Location: In the leftmost byte of /dev/kmem
Posts: 1,641
I checked with a colleague who happened to know the Tectia product: the difference is that normal ftp can provide a chrooted environment for every user, but the sftp can't do that, at least not out of the box, while Tectias sftp does have this functionality.

This might be perceived as being "more secure" to people who have no idea at all how ftp really works, which is, sad to say, quite often the case in auditing teams who in turn come up with some some "security-enhancement" which in fact is just plain silliness. I have once heard a default umask of 777 mentioned as desirable from such folk. Its usually the administrators who have to suffer from these, ahem, ideas.

Sorry, this won't help you with your problem but now i feel some relief. ;-))

bakunin

PS: I strongly suggest that you find out if this functionality is really needed at all in your case and if it isn't (which is most likely the case) you switch to openSSL products as suggested by Neo and shockneck. And i hop this helps.

bakunin