jd:/dev/blog

Commentaires

1. Le dimanche, octobre 3 2004, 14:57 par Tobias

WASTE (http://waste.sourceforge.net/) does exactly what you want. Sadly the only complete implementation is a Win32 app.

2. Le dimanche, octobre 3 2004, 15:29 par Nico

What about DAV? I don't have much experience with that, but you can run it over SSL (like HTTPS), you can transfer files, and you can get log files from Apache e.g.

3. Le dimanche, octobre 3 2004, 17:46 par Roland Mas

Who says HTTPS is not a file transfer protocol? I assume you mean for upload, but even then you can upload stuff through HTTP (S or not S). There's a PUT method in HTTP that you can use, or you can use a POST request with a 50-line PHP script to manage permissions, logging, size limitations and so on.

4. Le lundi, octobre 4 2004, 16:01 par Yann Aubert

What about mioga? Mioga (http://www.mioga2.org/) is a groupware application built on top of apache/modperl with a file manager which uses dav as transfer protocol. And with Mioga you've got users, groups and ACLs. You can acces your files through any dav client.

5. Le lundi, octobre 4 2004, 20:11 par LENHOF

There's also ftp-ssl on debian...

Regards,

6. Le mardi, octobre 5 2004, 07:30 par LENHOF

During my cleaning of my bookmarks I just found this :

http://sftplogging.sourceforge.net/

7. Le mardi, octobre 5 2004, 23:06 par Emmanuel Lacour

You can also use a plain rsync server with ssl tunneling (stunnel) instead of rsync over ssh. No shell, x509 control if you need it, good bandwith rate....usefull for backups, but need stunnel on the server and on the client.<br /> I don't agree with ftp-ssl and NAT, it's working quite well here with proftpd and nat/conntrack modules for ftp (just tcp:21 open and leave the conntrack track the related connections)

8. Le jeudi, octobre 7 2004, 14:56 par Chris Jones

What about sftp? It works out of the box on any unix box with openssh's sshd (and probably others). It's also as secure as ssh and there are graphical explorers for it for various OSen (even Nautilus can browse them).

9. Le jeudi, octobre 7 2004, 14:59 par Chris Jones

and of course the rest of my post was supposed to say that patching it to add logging support is probably a better solution than most other options.

10. Le mardi, novembre 30 2004, 19:33 par Anonymous

Do it yourself SSH allows arbitrary commands to execute, including a simple file transfer protocol tool. And it provides neatly a virtual chroot. Does not allow subdirs though (has security implications). In ~user/.ssh/authorized_keys add the SSH key with the prefix: command="/home/user/.ssh/restrict.py",no-pty,no-port-forwarding,no-X11-forwarding,no-agent-f orwarding ssh-dss <SSH keydata>

restrict.py (HTML might be garbled): <pre>

1. !/usr/bin/python

import sys, os, re

is_good_file = re.compile(r"^[0-9a-zA-Z][-a-zA-Z0-9. ]*$").match

1. datadir is the file area

datadir = "/home/user/pool/"

def handle_list ():

   files = os.listdir(datadir)
   files.sort()
   print "
".join(files)

def handle_range (l, fname):

   if is_good_file(fname):
       f = file(datadir+fname, 'rb')
       f.seek(l)
       data = f.read(1024)
       while data:
           sys.stdout.write(data)
           data = f.read(1024)
       sys.stdout.flush()
   else:
       print "Sorry."

_logfile = open("/home/user/.ssh/connect.log", 'a') def log (msg):

   _logfile.write(msg)
   _logfile.write("
")
   _logfile.flush()

def get_time ():

   import time
   return time.ctime(time.time())

def main ():

   arg = os.environ.get("SSH_ORIGINAL_COMMAND", "")
   log("user logged in on %s, cmd %s" % (get_time(), `arg`))
   if arg=="list":
       handle_list()
   elif arg.startswith("get "):
       handle_range(0, arg[4:])
   elif arg.startswith("range "):
       l, fname = arg[6:].split(" ", 1)
       handle_range(long(l), fname)
   else:
       print "Sorry."

if __name__=='__main__':

   try: main()
   except Exception:
       import traceback
       exctype, value, tb = sys.exc_info()
       traceback.print_exception(exctype, value, tb, None, _logfile)
       print "Sorry."

</pre>

• Accueil -
• Archives

Recherche

Statistiques billets

460 Billets
680 Commentaires
15 Rétroliens