ftp security Post: 16766

Sponsored Content

Top Forums Shell Programming and Scripting ftp security Post 16766 by thekid on Wednesday 6th of March 2002 04:40:44 PM

03-06-2002

thekid

Guest

ftp security

I have written a number of ftp scripts to put/get files between unix and other systems. My scripts only ftp to servers inside of our firewall. However, I have heard of risks involved with using the typical ftp automation techniques if one goes into unsecure areas with thier ftp processes.

Typical to me:

ftp -i -v -n [hostname] <<EOF
user USERNAME PASSWORD
hash
cd [to_dir]
lcd [from_dir]
put FILENAME
close
bye
EOF

The main risk I have heard of is that the username and password are passed in plain text. Are there any ways to get around this on the shell scripting level? Or, do other options need to be considered?

Let me know if more details are needed...

thekid

2 More Discussions You Might Find Interesting

1. HP-UX

ftp security

Hi all, Are there any white papers on setting up ftp, where a user logs in from any system to put a file on another UNIX machine. eg. the external user puts a file in "ddd". We only want them to have access to this directory for write purposes and access no where else. Can we put an acl...

2. AIX

Unix security -- FTP service????

I would like to ask for you suggestions or comments see if you can help. Since system auditing is under progress and the AIX is the main investigated unit. They are asking to disable the FTP service to enhance the security but I doubt. For daily use, the FTP will help administrator to download...

LEARN ABOUT DEBIAN

bup-ftp

bup-ftp(1)						      General Commands Manual							bup-ftp(1)

NAME

       bup-ftp - ftp-like client for navigating bup repositories

SYNOPSIS

       bup ftp

DESCRIPTION

       bup ftp is a command-line tool for navigating bup repositories.	It has commands similar to the Unix ftp(1) command.  The file hierarchy is
       the same as that shown by bup-fuse(1) and bup-ls(1).

       Note: if your system has the python-readline library installed, you can use the <tab> key  to  complete	filenames  while  navigating  your
       backup data.  This will save you a lot of typing.

COMMANDS

       The following commands are available inside bup ftp:

       ls [-s] [-a] [path]
	      print the contents of a directory.  If no path argument is given, the current directory's contents are listed.  If -a is given, also
	      include hidden files (files which start with a . character).  If -s is given, each file is displayed with its hash from the bup  ar-
	      chive to its left.

       cd dirname
	      change to a different working directory

       pwd    print the path of the current working directory

       cat filenames...
	      print the contents of one or more files to stdout

       get filename localname
	      download the contents of filename and save it to disk as localname.  If localname is omitted, uses filename as the local name.

       mget filenames...
	      download	the contents of the given filenames and stores them to disk under the same names.  The filenames may contain Unix filename
	      globs (*, ?, etc.)

       help   print a list of available commands

       quit   exit the bup ftp client

EXAMPLE

	      $ bup ftp
	      bup> ls
	      mybackup/    yourbackup/

	      bup> cd mybackup/
	      bup> ls
	      2010-02-05-185507@   2010-02-05-185508@	 latest@

	      bup> cd latest/
	      bup> ls
		(...etc...)

	      bup> get myfile
	      Saving 'myfile'
	      bup> quit

SEE ALSO

       bup-fuse(1), bup-ls(1), bup-save(1), bup-restore(1)

BUP

       Part of the bup(1) suite.

AUTHORS

       Avery Pennarun <apenwarr@gmail.com>.

Bup unknown-																bup-ftp(1)