The SSH File Transfer Protocol, (sometimes called Secure File Transfer Protocol, Secure FTP), or SFTP, is a network protocol that provides file access, file transfer, and file management functionality over any reliable data stream.

learn more… | top users | synonyms

80
votes
6answers
552k views

What port does SFTP use?

Does SFTP use port 21 or port 22?
54
votes
2answers
62k views

SFTP logging: is there a way?

I'm wondering if there is a way to log commands received by the server. It can be all SSH commands, as long as it includes information on commands related to file transfer. I'm having issues with an ...
40
votes
5answers
21k views

Allow SFTP but disallow SSH?

I'm starting a very little hosting company for a few friends and little clients, nothing big. I want to give my "clients" the right to manage their files on the server. I hate FTP as it is not secure ...
24
votes
5answers
30k views

Is it possible to use rsync over sftp (without an ssh shell)?

Rsync over ssh, works great every time. However, trying to rsync to a host which allows only sftp logins, but not ssh logins, provides the following error: rsync -av /source ssh ...
20
votes
4answers
13k views

Difference between scp and sftp

What is the difference between sftp and scp?
17
votes
4answers
2k views

Why does Amazon release private keys instead of public keys?

My brain is wrapped around the axle on public and private keys. When you create a cloud server (instance) on Amazon's EC2 service and then want to connect to it via SSH, Amazon requires you to ...
15
votes
6answers
7k views

What are some secure alternatives to FTP? [closed]

This Hacker News story is all about the downsides of FTP. The only reason I might set up FTP is that it's easy. I know about and use scp already, but sometimes I want to share files with someone ...
14
votes
5answers
28k views

How to put desired umask with SFTP?

I have a SFTP server (openssh/sftp-server) and I would like to set umask 002 for users using this service. I tried setting PAM (pam.d/common-session), and .profile for each user, but no luck. With ...
14
votes
1answer
53k views

How to add user with SFTP/ FTP access to '/var/www/html/website_abc' folder on Amazon EC2 Centos?

Possible Duplicate: Linux directory permissions I'm working with some third-party developers and I would like to grant SFTP (or FTP) access to the root folder for a website they're working ...
13
votes
3answers
2k views

Enable SSH shell access but disable SFTP access

I've searched for a viable answer to this question, and most of the answers include advice on why to not do it. However, here's the scenario, and what makes it necessary: I have a console app, and in ...
11
votes
4answers
72k views

What is the difference between SFTP port 22 or port 990?

I know that explicit "negotiated" FTPS is preferred, because it still uses the standard port 21 with that method but in regards to "implicit" non-negotiated FTPS using a standard port of 990 vs. port ...
11
votes
9answers
1k views

SSH to a computer that will then SSH to another computer [duplicate]

Possible Duplicate: How to configure a shortcut for an SSH connection through a SSH tunnel I have a situation where I would like to have SSH/SFTP access from my workstation to a server that ...
11
votes
2answers
10k views

How do I set default permissions for SFTP for an Ubuntu Server?

We have an Ubuntu 10.04 server. How can I set it so that new files created (or copied) over SFTP or SSH have g+rw and g+rwx permissions (where appropriate)? I'm also using setgid (chmod g+s) so that ...
11
votes
1answer
6k views

SFTP: file symlinks in a jailed (chrooted) directory

I'm trying to set up sftp so that a few trusted people can access/edit/create some files. I have jailed a user into their home directory (/home/name) but have run into a problem. I want for them to ...
11
votes
3answers
6k views

Set up sftp to use password but ssh not to use password

Is it possible to set up a user on ubuntu with openssh so that ssh does not use password authentication but sftp does? I assume that if I change /etc/ssh/ssh_config to have PasswordAuthentication yes ...
10
votes
4answers
3k views

Securing file system for secure SFTP server

This might not seem as a development question, but in essence it is. Let me explain how. Our main development focus is dynamic content pages. Some of our customers have asked us to allow them space ...
10
votes
4answers
10k views

How to get full control of umask/PAM/permissions?

// Updated Feb 8 - Outstanding issues in brief: How to umask directories differently from files? How to umask on Nautilus copy/paste? How to set umask for SSHFS? OUR SITUATION Several people from ...
9
votes
2answers
7k views

Is IIS SFTP natively supported by Windows Server 2012 R2?

Does Windows Server 2012 R2 have native SFTP support? I see a role FTP Server but it doesn't say whether this includes SFTP.
9
votes
9answers
52k views

How can I map a SFTP to a Drive, natively in Windows

Today I saw that Vista and Win7 (which I am using) have the option to map ftp natively, according to this article: http://cybernetnews.com/cybernotes-map-a-ftp-to-a-drive-in-windows/ But I need to ...
9
votes
4answers
3k views

Methodologies for performance-testing a WAN link

We have a pair of new diversely-routed 1Gbps Ethernet links between locations about 200 miles apart. The 'client' is a new reasonably-powerful machine (HP DL380 G6, dual E56xx Xeons, 48GB DDR3, R1 ...
8
votes
5answers
9k views

How does RSYNC does incremental Backups

How does RSYNC knows which files are chnages and which are not. Does it logs its data anywhere in the file. Because I want to do incrrmental backups but first it will transfer all files. So my main ...
8
votes
3answers
3k views

Use .bashrc without breaking sftp

My problem is that I need to set a few variables, and output a few lines every time I login to the ssh shell, and at the same time I have to be able to use sftp to tarnsfer files via Filezilla. Now, ...
8
votes
4answers
6k views

FTP v/s SFTP v/s FTPS

We're setting up a web server at our workspace. In conjunction, we're planning to install an FTP server, however I'm stuck at what protocol to employ -- FTP, SFTP or FTPS. I googled around, trying to ...
8
votes
3answers
26k views

How to use openssh sftp command with a RSA/DSA key specified from the command line

The Openssh ssh and scp command provied an -i command line option to specify the path to the RSA/DSA key to be used for authentication. Looking at the sftp man pages I was not able to find a way to ...
8
votes
2answers
14k views

Creating SFTP users and jailing to chroot on CentOS - user authentication error

I've got a CentOs release 6.4 with Digital Ocean and would like to successfully create SFTP users and jail them to the user's own chroot home directory but I fear I'm making a mess of this. I've ...
8
votes
4answers
6k views

How can I create a user only for sftp

I have added a user to the system via "adduser" script. Then, in the /etc/passwd file I tried changing the /bin/bash to /sbin/nologin or to /dev/null with no luck... I would like the user not having ...
8
votes
2answers
6k views

symbolic link and filezilla over sftp

I'm pretty new to debian, and I'm trying to set up a server. I created a user which can only access to his folder /home/username (and its subdirectory). Now I want to use that user for the webserver ...
8
votes
7answers
1k views

Options for an SFTP server on a Windows Machine

We have a client who wishes to send files to us via SFTP (citing that FTP is inherently insecure). We have a Windows Environment (Windows 2003 Server). Currently, I'm reviewing copssh (OpenSSH for ...
8
votes
2answers
11k views

SFTP fatal bad ownership or modes for chroot directory ubuntu 12.04

I just set up my SFTP server and it works fine when I use it from my first user account. I wanted to add a user which we will call 'magnarp'. At first I did like this in sshd_config: Subsystem sftp ...
8
votes
4answers
6k views

OpenSSH anything like 'internal-sftp' but for SCP?

I'm running Debian stable and I'm looking to establish the following environment for users in my 'sftponly' group: jailed can transfer with SFTP can transfer with SCP cannot login interactively with ...
7
votes
4answers
6k views

How do I setup SFTP for sites without giving shell access?

I'd like to use SFTP for all the sites on my cPanel CentOS server as we had an FTP password hacked before (not hard). However I don't want each sites SFTP account to have shell access (not even jailed ...
7
votes
1answer
3k views

Can I configure VSFTPD to listen only to localhost?

I have a legacy app that needs FTP and cannot do SFTP. My solution is: put an FTP server in place using VSFTPD configure the firewall to accept port 21 connections only from localhost Set up an SSH ...
7
votes
1answer
146 views

How to detect or log interrupted uploads with OpenSSH SFTP server?

I have this problem where a customer of ours has been SFTP-ing truncated data. I'm not sure if the problem is on our end or his. I've enabled SFTP logging but it does not allow me to detect if an ...
7
votes
3answers
4k views

how to pipe data to sftp connection?

ftp supports the put "|..." "remote-file.name" command to pipe data to an ftp connection. Is there something similar available for sftp? In sftp i get the following error: sftp ...
7
votes
1answer
11k views

How do I set up an sftp user to login with a password to an EC2 ubuntu server?

I have an Ubuntu Server running on an EC2 instance. To login to that server I use a certificate file without any password. I've installed and configured vsftpd and created a user (let's call him ...
6
votes
4answers
3k views

How to restrict everyone except a certain group in SSH?

I want to restrict all users on a server to only be able to use SFTP while the members of an admin group should have full SSH access. I found that it is possible to restrict the members of a group by ...
6
votes
2answers
3k views

SSH Host key verification issues using VIP

We have 2 production servers on a VIP, only one is in use at a time, for example: myservice.mycompany.uk normally points to server1, in the event that server1 fails it is changes to point at server2. ...
6
votes
5answers
9k views

How to disable sftp for some users, but keep ssh enabled?

My project needs me to disable sftp for some users, but those users still need to connect over ssh. Does anyone know how to implement this? I've seen suggestions to change the file at ...
6
votes
4answers
219 views

Secure storage solution sought

I need an end-to-end multi-client/multi-supplier secure storage system, I can build it using various bits and pieces but it feels overcomplex - am I missing a trick? Specifically I need to offer ...
6
votes
1answer
3k views

Trying to set up SFTP only in a chroot jail for one user

Hopefully you guys can help and see if I've done something weird here, I'm trying to log in with a user I set up, FileZilla shows me: Command: open "///@///" Command: Pass: ******** Status: ...
6
votes
3answers
1k views

Restricting the network access of Docker container

I'm in the process of creating an SFTP only Docker container, one that will be used by multiple people for the sole purpose of uploading and managing files in their own chrooted Environment. On ...
6
votes
3answers
160 views

Copying over SSH via Putty tools is slower than via WinSCP

Uploading from my Windows PC (1) to my Ubuntu machine (2) in another city using PuTTY tools is slow. I tested this over OpenVPN tunnel and via port forwarding to (2). It turns out that using rsync ...
6
votes
1answer
312 views

Different “RequiredAuthentications2” for sshd and sftp subsystem

we're currently using a 2factor authentication on our SSH servers, so we have "RequiredAuthentications2 publickey,keyboard-interactive" in our sshd_config (publickey for the key, keyboard-interactive ...
5
votes
3answers
5k views

Trying to setup chroot'd rsync

I'm trying to set up a backup server. I want to chroot each user (client) to its home directory, and only allow it to use sftp and rsync. I quickly discovered that I was not the only one trying to do ...
5
votes
2answers
522 views

SFTP server dmz vs trusted

We're looking to ditch our existing solution and go with a simpler (much cheaper) SFTP server to allow file exchanges with clients. Our network consists of a Trusted and DMZ networks. The current ...
5
votes
2answers
3k views

How to execute a script on sftp connection?

I run an ssh server on my machine and I restrict access to certain users to sftp only with internal-sftp & ChrootDirectory. What I need is a way to execute a script before chrooting users. ...
5
votes
9answers
3k views

ssh many users to one home

I want to allow some trusted users to scp files into my server (to an specific user), but I do not want to give these users a home, neither ssh login. I'm having problems to understand the correct ...
5
votes
1answer
255 views

SSH & SFTP: Should I assign one port to each user to facilitate bandwidth monitoring?

There is no easy way to track real-time per-user bandwidth usage for SSH and SFTP. I think assigning one port to each user may help, but I am wondering if my approach is workable. Use case Bob, ...
5
votes
2answers
708 views

nginx clobbering sftp traffic during peak times - is tc the answer?

This is probably a continuation of my previous (unanswered) question because the underlying cause is probably the same. I have a Linux server with nginx and sshd running on it. It's on a shared ...
5
votes
3answers
8k views

How to check diskspace on SFTP server

Recently I encountered a lack of diskspace problem on a SFTP server and I realised I have no idea how to check how much is left or even the total amount. Does anyone know how to do this through an ...