SSH FTP question

[Falcon]

I set up sshd and figured out how to set up keys and stuff. My question is how a user cna use it to upload a file, what is the command to do that?

Also, I basicly ran ssh-keygen and sent the output to /home/username/.ssh/. identity and identity.pub were create and I coppied identity.pub to authorized_keys. I then did a ssh -l username 127.0.0.1 and it worked.

I just need to copy identity.pub to a client computer and launch an SSH client for it to work now, right?

What is a good client for windows?

Thanks in advance,
Falcon

[Strike]

sftp is the ssh FTP add-on. The way it works is like ... (not like so, because this is scp, oops)

scp <username>@<source-machine>:<path-to-file> <username>@<destination-machine>:<path-to-destination>

[ 06 June 2001: Message edited by: Strike ]

[cmndr keen]

scp works too for quick copies.

For GUI's, the only that I know of are SecureFX (cool) and the one that ships w/ SSH.com's distro. (not quite as cool).

[Strike]

whoa! where's my head? That's the syntax for scp :) I'll go change it ... I forget how to use sftp - check the man page, I think it's got good stuff.

[Falcon]

Ok, I got it figured out, I just type:
sftp user@host
and it works. Most of my users will be using windows, is there a good program that can do SSH2 connection and SFTP?

Also, do the users need identity.pub or identity to connect? They just need the client, that file, and there password, right?

One last question and I think I will have everything figured out. For logging, how should I set it up? I will have less than 15 users that should be using SSH and may have many connecting over the web (to port 80 and 443). I would like to make sure that only the people that are supposed to are connecting to SSH and that no hack atempts are made against my server (vulnerabilities.org only found one problem and it was incorrect). What is the best way to do this? I would like to make sure I can get there I.P. so I can post it on the main BBS :D.

Thanks a lot,
Falcon

[Craig McPherson]

The cool thing about sftp is that it works over an ordinary SSH connection -- nothing has to be done server-side. Sftp just makes a regular SSH connection but instead of allowing the user to interact with the SSH session directly, it masquerades as an FTP-style client to let user put and get files over the SSH connection.

Correct me if I'm wrong, but I think scp has to be enabled server-side. I have a "SubSystem" line in my OpenSSH configuration file which I think enables SCP support.