topic Re: passwd issues with ftp scripting in Operating System - HP-UX

passwd issues with ftp scripting

colin chua_2 — Tue, 27 Aug 2002 08:30:11 GMT

Hi guys,
Need to know is there any way of protection against leakage of passwd when i do ftp scripting?!
Cheers!

Re: passwd issues with ftp scripting

Timo Ruiter — Tue, 27 Aug 2002 08:32:24 GMT

I beleve not... Scripting works the same as an interactive session.

Try sftp (uses SSL).

Timo

Re: passwd issues with ftp scripting

ramesh_6 — Tue, 27 Aug 2002 08:52:55 GMT

Hi,

SSH is one good way of protecting clear passwords going over the network... let it be telnet or ftp.

In normal circumstances when a client is trying to login to the server usring telnet or ftp the password is sent as a clear text over the network. This enables the snifffer programs to capture the network packets and read them to get the clear text passwords.

In Secure shell mode, the client using a secure encrypted algorithm to deal with clear text. Since the communication between client and server happens in an encrypted way it is very diffcult to get and decode the passwords.

SSH includes components for telnet and ftp and uses the port number 22 instead of 23 and 21.
That is a good way to protect your passwords from drifting into the internet as cleartext.

In automatic login where you store your password in a file it will be easy for anybody who has the right to read the file to open and read the password. Hence make sure you dont have read poermissions for the groups and others section.

Hope this helps

Regds
Ramesh

Re: passwd issues with ftp scripting

Deepak Extross — Tue, 27 Aug 2002 10:02:19 GMT

See this thread
http://forums.itrc.hp.com/cm/QuestionAnswer/1,,0x4271107d277ad611abdb0090277a778c,00.html