secure proftpd with SFTP and force it

[SupaYoshi]

Hi! I am wondering how to force SFTP instead of FTP with Proftpd.
A few questions, is the file, /etc/sentora/configs/proftpd/proftpd-mysql.conf the only config file?

I found a tutorial but it talks about authorized users, which file is unfamiliar to me with sentora?
https://www.digitalocean.com/community/t...ead-of-ftp

Could I just add the info on the bottom to proftpd?

Code:

<IfModule mod_sftp.c> SFTPEngine on Port 2222 SFTPLog /var/log/proftpd/sftp.log # Configure both the RSA and DSA host keys, using the same host key # files that OpenSSH uses. SFTPHostKey /etc/ssh/ssh_host_rsa_key SFTPHostKey /etc/ssh/ssh_host_dsa_key SFTPAuthMethods publickey SFTPAuthorizedUserKeys file:/etc/proftpd/authorized_keys/%u # Enable compression SFTPCompression delayed </IfModule>

If so, what to do with the line:

Code:

SFTPAuthorizedUserKeys file:/etc/proftpd/authorized_keys/%u

Can I use passwords with SFTP? Or only work with keys??
Should I sable SFTP Access on the SSH Port? Like that guide suggests, and if so why?


Thanks

[Me.B]

Doing so you will rely on SSH authenfications keys no more on users created in DB, it's explained in the tutorial.

You would rather focus on only adding TLS to Proftpd instead of blowing out your setup:

http://www.proftpd.org/docs/howto/TLS.html

M B