PDA

View Full Version : Log file downloads with sftp, but not gftp


Trilby
04-22-2009, 03:06 PM
I get a "permission denied" when trying to retrieve my web log files using gftp, but have no problem if I use sftp (on Fedora 10). Using ssh-agent in both cases for authentication (i.e., no password supplied).

sftp> cd logs_web
sftp> get access.20090421.gz
Fetching /var/shadowdom/xxxxxx/logs_web/access.20090421.gz to access.20090421.gz
/var/shadowdom/xxxxxx/logs_web/access.20090421.gz 100% 31KB 31.2KB/s 00:00

gftp:
16: Open /var/shadowdom/xxxxxx/logs_web/access.20090421.gz
16: Permission denied

Thanks for any help!

Trilby
04-23-2009, 12:12 AM
FWIW, if I first copy the log file to my home directory, it downloads OK with gftp. So.....the problem must be somehow connected to the /var/shadowdom/xxxxxx/logs_web directory (where xxxxxx is my xdomain).

Terra
04-23-2009, 02:50 AM
sftp goes through OpenSSH

gftp goes through the FTP daemon...

The FTP daemon is locked down to prevent you from retrieving items outside of your xdom tree...

OpenSSH is a bit more advanced and its security mechanisms is based on the same credentials/permissions that you would have if your were logged into the server via slogin (or ssh)...

In short, it's not a -true- problem, but simply just difference in security mechanisms that define the scope of your view/access... I highly doubt we will hack the FTP daemon to allow it because dealing with symlinks is tricky business...

Hope that helps to explain the issue...

Trilby
04-24-2009, 02:17 PM
Thanks for the explanation. No problem using sftp, but I couldn't understand why there would be a difference.

Still one of my favorite things about FutureQuest -- you always get a straight answer. :yeah: