After so many years of working with FTP on Ubuntu, I'm now confused. I read on many docs that FTP is insecure and that SFTP or SSH is the best way to go.

But here's what I want to do...

We are a group of 4 users on a LAN. The Ubuntu server modules (eg: LAMP stack, Postgres, etc) are actually on an Ubuntu Desktop OS. Anyway, we're using it as a server.

I need for each user to log-in from their PCs (usually Ubuntu) and update their work in /var/www and other shared folders. Not everyone has access to every folder. So I guess creating FTP accounts for each user is a good way to go.

Now, since many people suggest that open-SSH or SFTP is the way to go, I'd like to know the following:

  1. Is it correct to assume that SSH applies to a machine and NOT to a user? So if this is the case users will need to stick to a single computer.

  2. Does SFTP work the same way as FTP where user names can be created with restricted upload/download rights?

  3. Is it really a bad idea to continue using FTP instead of the more 'secure' alternatives since I'm on a LAN?

Pretty confused and really appreciate your inputs!

closed as too broad by David Foerster, Kevin Bowen, waltinator, user535733, user364819 Jul 1 '18 at 6:22

Please edit the question to limit it to a specific problem with enough detail to identify an adequate answer. Avoid asking multiple distinct questions at once. See the How to Ask page for help clarifying this question. If this question can be reworded to fit the rules in the help center, please edit the question.


Working backwards in your group of questions:

3) If we presume that your FTP server is not exposed to the wilds of the Internet, then FTP is fine for transferring files internally on your LAN.

2) SFTP works just like FTP for implementation regarding users and access privileges. Only the security of the connection between host and client is increased through encryption.

1) SSH works at both the machine and user level. Users with host machine accounts can SSH in to the host; hosts can be configured with non-machine users to allow SSH (see running an OpenSSH Server).

Not the answer you're looking for? Browse other questions tagged or ask your own question.