We have nearly finished rewriting a legacy web app system and have moved the domain name to a new server. The only other feature we have to make is a small one that must interface with another server that I have no control over.
The old system periodically received data from this other server via unsecured ftp. Apparently the other server would log into our server and put a data file in a specific directory, which our system would read.
We have the username and password used to log in. My idea was to create an ftp account using this same username and password on the new server. Doing this we would not have to modify the other server.
I've seen many articles saying unsecured ftp is insecure. Can I do anything to make this work without compromising the security of the rest of our server (which hosts several production websites). The data in this file is going to be directly displayed on a website, so it doesn't matter if the file itself is secure.
Can I set up something where I create a user with very limited privileges that can receive this file in a specific directory that another user can read from?
Edit: We are running Ubuntu server 11.04 on a Linode, so I have full control over our server.