passwd issues with ftp scripting

[colin chua_2]

Hi guys,
Need to know is there any way of protection against leakage of passwd when i do ftp scripting?!
Cheers!

[Timo Ruiter]

I beleve not... Scripting works the same as an interactive session.

Try sftp (uses SSL).

Timo

[ramesh_6]

Hi,

SSH is one good way of protecting clear passwords going over the network... let it be telnet or ftp.

In normal circumstances when a client is trying to login to the server usring telnet or ftp the password is sent as a clear text over the network. This enables the snifffer programs to capture the network packets and read them to get the clear text passwords.

In Secure shell mode, the client using a secure encrypted algorithm to deal with clear text. Since the communication between client and server happens in an encrypted way it is very diffcult to get and decode the passwords.

SSH includes components for telnet and ftp and uses the port number 22 instead of 23 and 21.
That is a good way to protect your passwords from drifting into the internet as cleartext.

In automatic login where you store your password in a file it will be easy for anybody who has the right to read the file to open and read the password. Hence make sure you dont have read poermissions for the groups and others section.

Hope this helps

Regds
Ramesh

[Deepak Extross]

See this thread
http://forums.itrc.hp.com/cm/QuestionAnswer/1,,0x4271107d277ad611abdb0090277a778c,00.html