Mor_gath
November 4th, 2003, 04:10
hi, I'm looking into installing a ftpd service on my openbsd machine I won't be need any advanced options just a simple ftpd service. There will only be 2-3 users on the ftp.
I looked at proftd but looks to be fairly large ftpd are there any small but secure ftpd out or should I go with proftpd, thnx in advance for any thoughts.

optyk
November 4th, 2003, 21:26
You already have a FTP server, you just need to enable it. Read the ftpd manpage.

molotov
November 4th, 2003, 22:04
check out /etc/inetd.conf, man inetd.conf

Mor_gath
November 6th, 2003, 11:19
thnx for the answers ftpd is up and running, but it lacks auth tls, a little google searching found a project that has ftpd-tls has anyone tried any thoughts ?
pure-ftpd has tls support but I can't get it to work properly no user is chrooted and everyone according to it is a part of wheel group.

KrUsTy!
November 6th, 2003, 16:42
thnx for the answers ftpd is up and running, but it lacks auth tls, a little google searching found a project that has ftpd-tls has anyone tried any thoughts ?
pure-ftpd has tls support but I can't get it to work properly no user is chrooted and everyone according to it is a part of wheel group.

Have you taken a look at sftp? Its part of the ssh install on all openbsd installs. Its runs as part of the sshd, and is fully encrypted. Anyone connecting to the sftp service would have to have a sftp client or a ftp client that has sftp support. If your users are on windows computers there are a number of windows sftp clients out there.

The man page for the sftp server that is already on openbsd.
http://www.openbsd.org/cgi-bin/man.cgi?query=sftp-server

Filezilla is a windows ftp app that has sftp support
http://filezilla.sourceforge.net/

The free version of ssh secure shell also has an sftp client I think...
http://www.ssh.com/support/downloads/secureshellwks/non-commercial.html

Not sure if sftp will do what you want, but since its already a part of OpenBSD maybe it would fit your needs.

{K}

Kernel_Killer
November 6th, 2003, 20:41
I have to agree with KrUsTy. Sftp would be a much better idea unless using anonymous login. I could discuss how easy it is to sniff user/passes off a ftp line, but I won't. :D

molotov
November 6th, 2003, 22:33
I agree aswell, sftp is the way to go if you have that option.