|
发表于 2005-5-24 14:16:35
|
显示全部楼层
[code:1]
Kerberized FTP :
I'm pretty sure that MIT's athena distribution provides a modified version of FTP
which has kerberos support. This allows for secure authentication, but I'm not sure
if the anything else is encrypted. If authentication is all that you need to be
secure you might want to check it out. Kerberos can be a pain to get working, but
once it is working it's really nice (i.e., you enter a password once and all your
kerberos enabled programs never bug you for a password).
Ssh port forwarding would probably also work, but everybody else has already
suggested that so I figured I'd throw out a different option.
GSSFTP :
If you download MIT Kerberos 5 ( http://web.mit.edu/kerberos/www/ ), it
includes GSSFTP which is a Kerberized FTP
service. Unless you have a Kerberos infrastructure at your location, however, this
may be an excessively complicated solution for you.
sendfile (for something completely different) :
If security is a big concern, and your ftp site is really only for a select group
of people, you may wish to consider the sendfile suite of utilities based on the
SAFT (?) protocol. Basically, it's akin to email or instant messaging systems but
with files and with decent security involved (you can filter out spurious senders
of files, no passwords need pass over the 'net).
Something to give a shot for those of you wanting to give your friend, who's too
lazy/paranoid/poor to set up an ftp server, a file
[/code:1]
只找到这个, gssftp是Kerberos自带的ftpd, 认证就是用Kerberos的, 所以在你没配好kerberos之前, 这个ftp是没法用的. 配置文件是在/etc/xiinit.d/里面, 把它禁用掉装个vsftpd用吧. |
|