No mod_tls in there at all on my installation, and no updates listed available for proftp.
I’m generally uncomfortable providing any level of shell access to users. One does have it, but mostly because I promised him a secure channel for his work on the last server.
For some reason I thought Iworx did this already, but I guess not.
I agree completely, but I figured out a way that works on RH9 to allow only SFTP access with out regular shell access. Just set the user shell from /sbin/nologin to /usr/libexec/openssh/sftp-server for the user you want to give SFTP access to.
to /etc/shells. Refresh the Shell Accounts page, and it will be available to users. Set the shell appropriately on a trusted account and test using SFTP (listed as FTP over SSH or SSH2 on some clients).
This makes me much happier. Thanks.
Maybe a wiki might be useful for handling documentation of little things like this?
For some reason I thought Iworx did this already, but I guess not.
We did, but it may not be built for all systems. The SRPM has the updates I believe. Martin, if you’d like to open a ticket I can check out the problems you had after building.
Not at the moment. I need to get a remote access card in the server before I take that one on again – the last time it happened, no TCP connections could be completed. I’m sure you can understand why I’m a little skittish.
Is that something that you setup when you make the RPM? I have only used RPMs, never made one so its a bit of a mystery to me.
I assume that when its a source RPM you can have some kind of if statement in the build part that check the --with “distro”, where distro is just a varaible that SRPM author makes.