why would using "sftp" require disabling "vsftpd"?

Fred Smith fredex at fcshome.stoneham.ma.us
Thu Feb 6 22:52:06 UTC 2014


On Thu, Feb 06, 2014 at 05:38:35PM -0500, Robert P. J. Day wrote:
> 
>   again, reading RHEL 7-beta docs and here:
> 
> https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux/7-Beta/html/System_Administrators_Guide/s1-ssh-configuration.html
> 
> one reads:
> 
> "For SSH to be truly effective, using insecure connection protocols
> should be prohibited. Otherwise, a user's password may be protected
> using SSH for one session, only to be captured later while logging in
> using Telnet. Some services to disable include telnet, rsh, rlogin,
> and vsftpd."
> 
>   never having used sftp before, i'm confused ... isn't sftp simply a
> secure ftp client? and if so, why would one want to disable vsftpd? i
> would still need an ftp server, would i not? can someone clarify what
> that passage is saying? thanks.
> 
> rday

AFAIK, sftp uses the sshd server, just as does ssh.

-- 
---- Fred Smith -- fredex at fcshome.stoneham.ma.us ----------------------------
                    Do you not know? Have you not heard? 
    The LORD is the everlasting God, the Creator of the ends of the earth. 
  He will not grow tired or weary, and his understanding no one can fathom.
----------------------------- Isaiah 40:28 (niv) -----------------------------


More information about the users mailing list