3 ms·
"found myself constantly having to go dig through email to find FTP credentials when things needed updating, or when we needed to give a new worker access. When
by sciurus 15y ago
"found myself constantly having to go dig through email to find FTP credentials when things needed updating, or when we needed to give a new worker access. When we had contractors or employees leave, for whatever reason, I’d have to worry about them leaving with access to our servers, as well as client’s servers, which we didn’t control, and hope that they didn’t use that access against us."
This literally makes no sense to me. When someone needs access to an account, add their public SSH key to it. When they don't, remove it.
- sxates 15y agoHow do you do this when you don't own or manage the server (ie, a client's server, or IT managed)?
- sciurus 15y agoIf the client allows you to transfer files to them via SSH, easy! If they don't, break out the clue-by-four. EDIT: Don't get me wrong, I think you're providing a useful service. I just hope that people will start a conversation about FTP's problems and alternatives before turning to 1FTP to mitigate the problems.
- tedunangst 15y agoThe people who need access don't have SSH keys.
- sciurus 15y agoThey don't have the FTP password, either. Help them generate an SSH key.
- tedunangst 15y agoThey don't know how to use SSH. Then you say they should learn. Then I say they aren't interested in learning. Then you say these people shouldn't be uploading files. Then we'll have to respectfully agree to disagree regarding how things do work and how they should work.
- sciurus 15y agoWhat software do they use for FTP? Cyberduck? FileZilla? WinSCP? They can keep using those. Just tell them how to generate an ssh key or set one up for them.