Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I'd like to replace FTP access with systems that are more secure. Sending passwords in plain text with no encryption is unacceptable and with single-sign-on growing, becoming less acceptable daily.

The catch: I need something that supports Linux, Windows and OS X and the server needs to run on Windows.

Edit: It also needs to authenticate users against pre existing Windows credentials.

share|improve this question
    
We've chosen WebDAV. I was leaning towards this over SFTP, but I wanted to gather opinions. SFTP is nice and I use it daily at home, but IIS is already running and supports WebDAV. –  jldugger Oct 6 '09 at 19:46
add comment

6 Answers

up vote 4 down vote accepted

One option is to use webdav. IIS supports webdav. Since you need the system to be secure you will obviously want to setup SSL.

Webdav is usually going to be open through most firewalls and will operate through a standard http proxy. Most of the other options suggested tend to be more difficult to get through firewalls that you don't control.

OSX, and Windows have native webdav clients. Linux can use webdav via fusedav.

Webdav is probably going to be somewhat easier for you users, but it does act somewhat quirky on occasion.

share|improve this answer
    
Happen to know any common clients that support FTP but not WebDAV? –  jldugger Sep 30 '09 at 22:09
add comment

SFTP sounds like what you need, and OpenSSH runs just fine under Windows/Cygwin, with clients available for all the platforms you need.

share|improve this answer
    
How does it handle authentication on Windows? Seperate passwd file? –  jldugger Sep 30 '09 at 21:01
    
Yes, although local/domain accounts should work as well; I can't find the exact HOWTO I used, but there's a decent one at cs.bham.ac.uk/~smp/projects/ssh-windows. Alternatively, you could use key-based authentication instead. –  RainyRat Sep 30 '09 at 21:23
1  
@jldugger, it depends on what sftp/ssh server you run. There are options that should be able to integrated with the AD or the computer's account database. –  Zoredache Sep 30 '09 at 21:23
    
IIS / FTP 7.5 now with SSL! –  AJ. Oct 1 '09 at 0:16
add comment

FTPS would also work.

http://en.wikipedia.org/wiki/FTPS

Josh

share|improve this answer
add comment

Have a look at CrushFTP. Runs great and has a wide variety of secure options. Great support and priced right. Have tried with Windows and Mac clients and it works great. Have not tried the latest version. Running 4.9.9 on a Windows 2003 Server running on VMware server. Performance is good and does not seem to demand much in resources. Free demo and some really good online instruction. From the site feature list "CrushLDAP (use ActiveDirectory, or LDAP to load your users from)"

http://www.crushftp.com/

We have been running for many months and everyone seems happy with the product.

share|improve this answer
add comment

Use Apache + mod-dav + mod-ssl. Your shares will be seen as a Web Folder under Windows, and as mountable filesystems or accessible with ftp-like clients under Linux and MacOS.

More info on WebDAV: http://www.webdav.org/

share|improve this answer
    
The box serving FTP right now is IIS. I'll be using this style of solution for a subversion website, but there's no point in installing two concurrent web servers. IIS does support WebDAV, so I'd give you more credit, but I can only mark one answer as 'best!' –  jldugger Oct 6 '09 at 19:41
add comment

I've used Bitvise WinSSHD on a few servers to this end. It (gasp) costs money, ~$99 / server, but it gives you a wide variety of SFTP options, including the ability to import keys to eliminate the use of passwords for authentication.

Works seamlessly with Mac, *nix and Windows clients from my experiences with it to date.

http://www.bitvise.com

HTH

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.