Hi! i have installed openBSD 4.4 on i386 and i use it as simple web server.
Apache 1.3 manages web server.
The problem is that i want to make safe file transfer via SFTP.
I know that it uses openSSH...
1) does i need to enable anything else than openSSH and SFTP?
2) where can i find openSSH tutorial for starter???
3)how must the sshd_config look like for password auth. ? i think its the simplies variant for me.
a)will SFTP work if openSSH is configured to make password auth. ?
4) what can i else use to safaly transfer files from windows pc to openBSD 4.4?
thank you.

Answers to questions
1) by default you will be able to use sftp to transfer files
2) it depends on what you want to know... try 'man ssh' first and if you find something that you're interested in google it
3) if I understand what you are asking correctly then openssh is already setup to authenticate system user's passwords
4) for windows sftp transfers I use filezilla. just enter the address of your server and set the port as 22 (or whatever port you may have set for ssh) and thats it!!!

try this command:

sudo cat /var/log/authlog | grep Invalid

if you've had your server open for any length of time, a large number of attempted logins will scroll by. Here's how to protect against these attacks ever succeeding:

groupadd ssh
vi /etc/group (and add yourself to the ssh group)

vi /etc/ssh/sshd_config
AllowGroups: ssh
PasswordAuthentication no

now add your public key your ~/.ssh/authorized_keys file

restart the ssh server:

sudo su -
(hit return to accept the default terminal selection)
pkill sshd && /usr/sbin/sshd