這個叫作 FTPS = FTP + SSL

有另一個名詞叫 SFTP = SSH + FTP ，也就是把 SSH 當 FTP用，跟FTPS名詞不同，走的協定也不同

相同的是傳輸都有加密

先看 proftpd 有沒有支援 ssl。沒有就安裝(省略)

# proftpd -l

Compiled-in modules:
  mod_core.c
  mod_xfer.c
  mod_auth_unix.c
  mod_auth_file.c
  mod_auth.c
  mod_ls.c
  mod_log.c
  mod_site.c
  mod_delay.c
  mod_codeconv.c
  mod_auth_pam.c
  mod_ratio.c
  mod_readme.c

[閱讀全文]

scponly是什麼

scponly : Restricted shell for ssh based file services

我可以用在什麼地方

今天假如我開放讓某個人可以ssh，但目的只是要抓檔案，我就可以用scponly來限制這個使用者只能抓，而無法登入主機操作了

環境 : server

CentOS release 5.7 (Final)
2.6.18-274.el5 #1 SMP Fri Jul 22 04:49:12 EDT 2011 i686 i686 i386 GNU/Linux

怎麼安裝

[閱讀全文]

[root@xx1 ~]# ssh 1.1.1.1
The authenticity of host '1.1.1.1 (1.1.1.1)' can't be established.
RSA key fingerprint is 5d:72:df:77:24:a9:80:e6:d1:23:68:4f:d9:42:6b:44.
Are you sure you want to continue connecting (yes/no)?

@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@ WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
Someone could be eavesdropping on you right now (man-in-the-middle attack)!
It is also possible that the RSA host key has just been changed.
The fingerprint for the RSA key sent by the remote host is
e1:9b:5c:16:a6:cd:11:10:3a:cd:1b:a2:16:cd:e5:1c.

[閱讀全文]

echo "TMOUT=1800" >> /etc/bashrc
echo "readonly TMOUT" >> /etc/bashrc
echo "export TMOUT" >> /etc/bashrc

登出再登入測試即可達到目的

yum install mod_authz_ldap

<Directory /var/www/html/test>
  AuthzLDAPMethod ldap
  AuthzLDAPAuthoritative on
  AuthzLDAPServer 10.10.10.123:389            # AD 的IP
  AuthzLDAPUserBase "DC=cross,DC=local"   # AD的網域名稱，我的是 cross.local
  AuthzLDAPUserKey sAMAccountName
  AuthzLDAPUserScope subtree
  AuthzLDAPBindDN "cross"                             # AD 管理者的帳號
  AuthzLDAPBindPassword "crosspassword"   # AD 管理者的密碼
  AuthName "Need Password with using AD"
  AuthType Basic
  require valid-user
</Directory>

PS1="u@h W]# "

PS1="u@h  wow w]# "

root@localhost 12:19:55 wow /var/www/html]#