why would using "sftp" require disabling "vsftpd"?

[poma]

On 07.02.2014 19:15, Pete Travis wrote:
> On Feb 7, 2014 4:47 AM, "Robert P. J. Day" <rpjday at crashcourse.ca> wrote:
>>
>> On Thu, 6 Feb 2014, Tim Evans wrote:
>>
>>> On 02/06/2014 05:38 PM, Robert P. J. Day wrote:
>>>>
>>>>    again, reading RHEL 7-beta docs and here:
>>>>
>>>>
> https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux/7-Beta/html/System_Administrators_Guide/s1-ssh-configuration.html
>>>>
>>>> one reads:
>>>>
>>>> "For SSH to be truly effective, using insecure connection protocols
>>>> should be prohibited. Otherwise, a user's password may be protected
>>>> using SSH for one session, only to be captured later while logging in
>>>> using Telnet. Some services to disable include telnet, rsh, rlogin,
>>>> and vsftpd."
>>>>
>>>>    never having used sftp before, i'm confused ... isn't sftp simply a
>>>> secure ftp client? and if so, why would one want to disable vsftpd? i
>>>> would still need an ftp server, would i not? can someone clarify what
>>>> that passage is saying? thanks.
>>>
>>> Actually 'sftp' is a special interface to ssh that looks and acts
>>> like ftp, but doesn't use the ftp protocol.  You do not need to
>>> maintain a vsftpd server to support folks using sftp.
>>
>>    yes, i realize that now ... having never used sftp before and based
>> on something i clearly misread, i had assumed sftp was simply a more
>> secure ftp client to talk to an *existing* ftp server; i know better
>> now.
>>
>>   and as for the admonition to *not* read RHEL 7 docs, given that RHEL
>> 7 will allegedly be based on fedora 19 (more precisely, what appears
>> to be a mix of fedora 18, 19, and 20), i would think that the current
>> RHEL 7 beta docs online should at least be moderately relevant with
>> respect to fedora.
>>
>> rday
>>
> 
> This is correct. In fact, many RH writers also volunteer their time in
> Fedora Docs, and the maintainers of the System Administrators Guide are
> among the most active Fedora writers. The content is CC-BY-SA both ways,
> and often freely shared.
> 
> Just like with software, your testing and feedback is valuable and
> appreciated.  There are bugzilla components for both RHEL and Fedora
> documentation. Any report of inaccuracies or requests for
> clarification/enhancement are welcome, though I do try to watch a few lists
> for such things too :)

Excusez-moi, this is Community support for *Fedora* users list,
*not* an "Rhel7-peap" list.
So *this* documentation is relevant - complete or not,
http://docs.fedoraproject.org/en-US/index.html
And the documentation was not a problem. :)
It should be read with understanding!


poma