Submit Hint Search The Forums LinksStatsPollsHeadlinesRSS
14,000 hints and counting!


Click here to return to the 'SSH and cleartext are not opposites' hint
The following comments are owned by whoever posted them. This site is not responsible for what they say.
SSH and cleartext are not opposites
Authored by: timkingman on Nov 06, '07 02:31:51PM
Your first sentence is absolutely correct. Getting a secure connection and setting cleartext_allow to NO are not related. If you have cleartext_warn and cleartext_allow turned on, you will get warned if your password is going to be sent in clear text. This is not the opposite of connecting over SSH. All Apple AFP servers and properly-configured netatalk AFP servers will use "secure" authentication mechanisms, whether or not the entire connection is tunneled through SSH.

The problem you're actually seeing is separate and unrelated, and I think I see the same thing, where my 10.5 client isn't making an SSH/secure AFP connection to my 10.4 server, but that doesn't necessarily mean the password is sent in the clear.

[ Reply to This | # ]