Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

A project I'm on requires I upload some files to a vendor's remote server. I requested a secure connection, and suggested scp or https or sftp. In response, they stated they could grant me ssh access, but they didn't support scp.

I know you can have scp access without ssh access (via, say, http://sublimation.org/scponly/ ), but hadn't heard of ssh without scp before.

Aside from the question of why have the setup this way, is this possible? ssh without scp?

share|improve this question
    
How come they "don't support" it? It's pretty much a zero-conf solution. –  LiraNuna Oct 7 '09 at 20:41
    
I wonder if they really know if they support it. Maybe they just know about the SSH part, and don't know they actually support file transfers as well? Just try...? –  Arjan Oct 7 '09 at 20:45
    
Yeah, I plan on just trying it to see. Thanks! –  kitt Oct 7 '09 at 22:13

3 Answers 3

up vote 4 down vote accepted

Apparently, it is possible (according to post #3 at that link). The trick is in the authorized_keys file format. There are several options that allow the server to restrict SSH features based on what key was used to authenticate. The "command=" option allows the server administrator to attach a restriction on the public key -- something like

"any incoming connections that authenticate with this key will execute this command, regardless of what command might have been requested by the user".

It might prevent the execution of standard SCP and SFTP, but if it provides an interactive shell there's probably a way around it:

$ ssh user@host 'cat /some/where/whatiwant.txt' > igotit.txt
share|improve this answer
    
This also shows that what the client does has nothing to do with security (besides a false idea thereof). Once you have a shell you can do what you want. The feature is to limit to other commands –  Paul de Vrieze Apr 24 '10 at 14:55
2  
Yeah, if you are trying to transfer non-media files over slow connections I use $ ssh remote.box.com "cat /dir/file | gzip" | gunzip > dir/file" –  Jarvin Apr 26 '10 at 19:45
    
@dan: good tip, thanks! –  quack quixote Apr 26 '10 at 19:56
    
Tar is a better choice than cat or gzip/gunzip for piping files through an ssh connection. It will transfer whole directory trees and preserve file permissions & timestamps. See here. –  Kenster Apr 26 '13 at 20:18

There is also FISH to get around precisely this irritating situation.

share|improve this answer

Although it's possible to disable scp and sftp and have only SSH access, typical setups with SSH access have scp and sftp access enabled since they all use the same family of protocols.

I use WinSCP to copy files to my server with an SSH setup all the time.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.