secure proftpd with SFTP and force it

secure proftpd with SFTP and force it - Printable Version

+- Sentora Support Forums (https://senforums.mach-hosting.com)
+-- Forum: Sentora Forum Archives (https://senforums.mach-hosting.com/forumdisplay.php?fid=5)
+--- Forum: Sentora Public Support Forums v1.0.x (https://senforums.mach-hosting.com/forumdisplay.php?fid=32)
+---- Forum: General Support Forum v1.0.x (https://senforums.mach-hosting.com/forumdisplay.php?fid=36)
+---- Thread: secure proftpd with SFTP and force it (/showthread.php?tid=1043)

secure proftpd with SFTP and force it - SupaYoshi - 02-12-2015

Hi! I am wondering how to force SFTP instead of FTP with Proftpd.
A few questions, is the file, /etc/sentora/configs/proftpd/proftpd-mysql.conf the only config file?

I found a tutorial but it talks about authorized users, which file is unfamiliar to me with sentora?
https://www.digitalocean.com/community/tutorials/how-to-configure-proftpd-to-use-sftp-instead-of-ftp

Could I just add the info on the bottom to proftpd?

Code:
<IfModule mod_sftp.c>

        SFTPEngine on
        Port 2222
        SFTPLog /var/log/proftpd/sftp.log

        # Configure both the RSA and DSA host keys, using the same host key
        # files that OpenSSH uses.
        SFTPHostKey /etc/ssh/ssh_host_rsa_key
        SFTPHostKey /etc/ssh/ssh_host_dsa_key

        SFTPAuthMethods publickey

        SFTPAuthorizedUserKeys file:/etc/proftpd/authorized_keys/%u

        # Enable compression
        SFTPCompression delayed

</IfModule>

If so, what to do with the line:

Code:
SFTPAuthorizedUserKeys file:/etc/proftpd/authorized_keys/%u

Can I use passwords with SFTP? Or only work with keys??
Should I sable SFTP Access on the SSH Port? Like that guide suggests, and if so why?

Thanks

RE: secure proftpd with SFTP and force it - Me.B - 02-12-2015

Doing so you will rely on SSH authenfications keys no more on users created in DB, it's explained in the tutorial.

You would rather focus on only adding TLS to Proftpd instead of blowing out your setup:

http://www.proftpd.org/docs/howto/TLS.html

M B