topic Re: Encrypted Password in ftp in Operating System - Linux

Encrypted Password in ftp

Raghu Chikkamenahalli — Wed, 05 Dec 2007 07:31:15 GMT

Hello All,

Is it possible to use encrypted passwd in ftp.

For example,
USER=user1
PASS="passwd" # Currently it in plain text, need
# to use the encrypted string.

ftp -n ftp_server <user ${USER} ${PASS}
put filename.txt
bye
EOF

Kindly show some pointers for the same.

Regards,
Raghu

Re: Encrypted Password in ftp

Dennis Handly — Wed, 05 Dec 2007 07:49:34 GMT

>Is it possible to use encrypted passwd in ftp.

That's probably the same level of security of rcp with .rhosts.

I don't think you can do this. You can put your password in a .netrc file.

Re: Encrypted Password in ftp

F Verschuren — Wed, 05 Dec 2007 07:53:00 GMT

sorry this is not poseble, if you want to encript you can use sftp and keys, than you will not have a passwd in your scripts.
the .netrc file is alsow useble, but then the passwd is in plain tektst in the users home dir.

sorry ftp is just not secure...

Re: Encrypted Password in ftp

Nitin Kumar Gupta — Thu, 03 Jan 2008 12:05:33 GMT

Dear Raghu,

You can keep the user name and password in an encrypted file created by crypt command.

For details check the man page of crypt.

If you want more assistance, let me write.

Rgds
-NKG-

Re: Encrypted Password in ftp

Steven Schweda — Thu, 03 Jan 2008 17:12:05 GMT

> Is it possible to use encrypted passwd in
> ftp.

Not really. You're talking to an FTP server,
and it almost certainly wants a plain-text
user name and password.

> You can keep the user name and password in
> an encrypted file created by crypt command.

And then you have to deal with the "crypt"
password. What's the point?

If you want to avoid using a plain-text
password, then you _should_ be asking how to
transfer a file without using FTP. You don't
seem to like suggestions to use SFTP, so it's
not clear what will make you happy. Perhaps
you should begin again, and state the actual
problem to be solved, and your actual
requirements and restrictions. This often
works better than asking how to implement
some impossible part of a bad solution.

Re: Encrypted Password in ftp

lawrenzo — Thu, 03 Jan 2008 17:24:37 GMT

Hi,

if you dont want to put the password in the script you can use the .netrc file and specify a switch with the ftp command ( see the man page )

as far as security goes I would not use this method however I would configure either sftp or scp using the ssh protocols etc.

hth

Chris

Re: Encrypted Password in ftp

Geoff Wild — Thu, 03 Jan 2008 18:13:11 GMT

No - you can't encrypt a password in ftp - non secure protocol.

Use sftp instead, setup keys to allow login without a password. (that way you don't have to embed the password in a script!).

Rgds...Geoff

Re: Encrypted Password in ftp

Bill Hassell — Fri, 04 Jan 2008 01:58:03 GMT

As mentioned, ftp is an industry standard protocol and there is nothing you can do to change the plaintext password requirment. Eve burying the password in $HOME/.netrc won't remove the requirement to transmit the plaintext string across the network. It can still be sniffed by anyone with access to your network.

While ftp is the most common protocol available for exchanging files, it is no longer useful in today's security environments. If the password is a concern, then the data is probably important and must be protected. The only compatible file transfer that is secure for both login/password as well as data is ssh (and it's siblings scp and sftp). You can download ssh from HP at software.hp.com.

Re: Encrypted Password in ftp

Raghu Chikkamenahalli — Fri, 04 Jan 2008 03:00:26 GMT

Hello All,

Thanks for the pointers.
I have used sftp in place of ftp by exchanging the keys.

Regards,
Raghu.