Re: PC based sftp servers

The security concerns I have are documented here:
http://archive.midrange.com/security400/200609/msg00048.html

For example, you allow cust X to download from /ftp/custx/fromus and
upload to /ftp/custx/tous. With regular ftp and the proper exit point I
can easily do this. How does one do this restriction with sftp? Does one
have to secure every single object to *public *exclude including all of
/qsys.lib? I suspect that may cause issues.

Or am I missing what can be done by digging further into
<snip>
The default configuration also does not have any AllowUsers, AllowGroups,
DenyUsers or DenyGroups.
In fact, it does not even contain traces for these directives, leaving the
clueless iSeries admin to search unix man pages for information about ssh
security.
</snip>


Rob Berendt