Fair point.
The passwords are taken from a database on the server and added to the
script on the fly. And we've configured our FTP servers so that they
only allow connections from known IP addresses. (Thus our HP3000s only
allow connections to be made from the other HP3000 in the network).
I would have to ask our network people whether it's possible that any
FTP sessions we make from the HP3000s to external FTP sites could be
"sniffed" for the passwords of the external FTP server.
-----Original Message-----
From: HP-3000 Systems Discussion [mailto:[log in to unmask]] On
Behalf Of Art Bahrs
Sent: 18 January 2006 22:10
To: [log in to unmask]
Subject: Re: [HP3000-L] FW: Automating FTP transfers
Hi Donna and Tony :)
Please remember to consider security of the process (passwords in
the
job?) , the data being FTP'ed and so on :)
Art "you thot I wouldn't mention security? hehehe" Bahrs
=======================================================
Art Bahrs, CISSP Information Security The Regence
Group
(503) 225-4992 FAX (503) 220-3806
"donna
garverick"
<donna_garveri
To
[log in to unmask]> [log in to unmask]
Sent by:
cc
"HP-3000
Systems
Subject
Discussion" Re: [HP3000-L] FW: Automating FTP
<HP3000-L@RAVE transfers
N.UTC.EDU>
01/18/2006
01:40 PM
Please respond
to
i_hate_spam@ya
hoo.com
|------------|
| [ ] Secure |
| E-mail |
|------------|
--- Tony Summers <[log in to unmask]> wrote:
> Just posted to HP9000-L
saw it...and it's a subset of the crowd that hangs out here :-)
> My question is .... how do I do this on HP-UX ? I think the same
> piping process can be used, but I think I'm not getting the contents
> of the ftpin file correct.
there are some things you can do -- like routing stderr 2&> out to a
file and examine it after the ftp is done.
with a bit of googling, i found this:
result=`ftp -v <<**
open $MACHINE
put file.txt $DESTINATION/filename.dat
bye
**`
value=`echo "$result" |grep "226 Transfer complete" |wc -l`
if [ $value = 1 ]
then
echo "\nFTP Success"
else
echo "\nFTP Failure"
fi
it's kinda clever and would certainly need some work but it's a start.
- d
Donna Garverick, HP-CSA Sr. System Programmer
dgarverick -at- longs -dot- com
925-210-6631 Longs Drug Stores
Come, my friends, 'Tis not too late to seek a newer world.
Tho' much is taken, much abides; and tho'
We are not now that strength which in old days Moved earth and heaven,
that which we are, we are.
"Ulysses", A. Tennyson
>>>MY opinions, not Longs Drug Stores'<<<
__________________________________________________
Do You Yahoo!?
Tired of spam? Yahoo! Mail has the best spam protection around
http://mail.yahoo.com
* To join/leave the list, search archives, change list settings, *
* etc., please visit http://raven.utc.edu/archives/hp3000-l.html *
========================================================================
======
IMPORTANT NOTICE: This communication, including any attachment, contains
information that may be confidential or privileged, and is intended
solely for the entity or individual to whom it is addressed. If you are
not the intended recipient, you should delete this message and are
hereby notified that any disclosure, copying, or distribution of this
message is strictly prohibited. Nothing in this email, including any
attachment, is intended to be a legally binding signature.
========================================================================
======
* To join/leave the list, search archives, change list settings, *
* etc., please visit http://raven.utc.edu/archives/hp3000-l.html *
______________________________________________________________________
This email has been scanned by the MessageLabs Email Security System.
For more information please visit http://www.messagelabs.com/email
______________________________________________________________________
The contents of this email are confidential to the intended recipient
and may not be disclosed. Although it is believed that this email and
any attachments are virus free, it is the responsibility of the recipient to confirm this.
Smith & Williamson Corporate Finance Limited - A member of the London Stock Exchange.
A member of M&A International Inc. http://www.mergers.net Registered in England No. 4533970. Authorised and regulated by the Financial Services Authority
Smith & Williamson Investment Management Limited, Registered No. 976145. Authorised and regulated by the Financial Services Authority.
Smith & Williamson Pension Consultancy Limited - Independent Intermediary. Registered No. 3133226. Authorised and regulated by the Financial Services Authority.
Smith & Williamson Fund Administration Limited, Registered No. 1934644. Authorised and regulated by the Financial Services Authority.
Smith & Williamson Limited - A member of Nexia International. Registered in England No. 4534022. Regulated by the Institute of Chartered Accountants in England & Wales for a range of investment business activities.
NCL Investments Limited, Registered No. 1913794.
Member of the London Stock Exchange authorised and regulated by the Financial Services Authority.
Registered Office: 25 Moorgate, London EC2R 6AY
Telephone: 020 7131 4000 http://www.smith.williamson.co.uk
Nexia Audit Limited - A member of Nexia International. Registered in
England No. 4469576. Registered to carry on audit work and regulated by the Institute of Chartered Accountants in England & Wales for a range of investment business activities.
Registered Office: 25 Moorgate, London EC2R 6AY
Telephone: 020 7131 4000 http://www.nexiaaudit.co.uk
______________________________________________________________________
This email has been scanned by the MessageLabs Email Security System.
For more information please visit http://www.messagelabs.com/email
______________________________________________________________________
* To join/leave the list, search archives, change list settings, *
* etc., please visit http://raven.utc.edu/archives/hp3000-l.html *
|
