The Kerberos V5 FTP program works exactly like the standard
UNIX FTP program, with the following Kerberos features added:
ftp> prompt) sets the protection level. "Clear"
is no protection; "safe" ensures data integrity by verifying the
checksum, and "private" encrypts the data. Encryption also ensures
data integrity.
For example, suppose jennifer wants to get her
RMAIL file from the directory ~jennifer/Mail,
on the host daffodil.mit.edu. She wants
to encrypt the file transfer. The exchange would look like the
following:
shell% ftp daffodil.mit.edu
Connected to daffodil.mit.edu.
220 daffodil.mit.edu FTP server (Version 5.60) ready.
334 Using authentication type GSSAPI; ADAT must follow
GSSAPI accepted as authentication type
GSSAPI authentication succeeded
200 Data channel protection level set to private.
Name (daffodil.mit.edu:jennifer):
232 GSSAPI user jennifer@ATHENA.MIT.EDU is authorized as jennifer
230 User jennifer logged in.
Remote system type is UNIX.
Using binary mode to transfer files.
ftp> protect private
200 Protection level set to Private.
ftp> cd ~jennifer/MAIL
250 CWD command successful.
ftp> get RMAIL
227 Entering Passive Mode (128,0,0,5,16,49)
150 Opening BINARY mode data connection for RMAIL (361662 bytes).
226 Transfer complete.
361662 bytes received in 2.5 seconds (1.4e+02 Kbytes/s)
ftp> quit
shell%
The full set of options to Kerberos V5 FTP are discussed
in the Reference section of this manual. (see FTP Reference)