Login with Linux FTP username and password

Question

What's the command for logging in with FTP all with one line?

ftp username:[email protected]

says:

Password required for username:password

Solution 1

ftp -nv yourftpserver.com

then user your_username or user anonymous

---

I posted this answer since ftp ftp://username:[email protected] did not work for me.

Usage: { ftp | pftp } [-46pinegvtd] [hostname]
   -4: use IPv4 addresses only
   -6: use IPv6, nothing else
   -p: enable passive mode (default for pftp)
   -i: turn off prompting during mget
   -n: inhibit auto-login
   -e: disable readline support, if present
   -g: disable filename globbing
   -v: verbose mode
   -t: enable packet tracing [nonfunctional]
   -d: enable debugging

Solution 2

You can try

my_ftp() {
  ftp -i -n <<EOF
    open $HOST
    user "$USER" "$PASS"
    $@
EOF
}

which you then can call with my_ftp $'ls subfolder\nanothercommand'

This solution is not interactive but the best I could figure out

edit: You are probably best off to just use curl instead.

Solution 3

The best option is to use a .netrc along with something like gpg for security purposes.

I've written a general purpose script for this, which I may upload later, but it boils down to:

gpg -c .netrc

or optionally with a passphrase on the commandline and an output destination:

gpg --passphrase <secretphrase> -o .netrc.gpg -c .netrc

Not shown here, but you could additionally use asymmetric keys (if you have them setup) with gpg to make this even more secure.

Then when you are ready to login

gpg .netrc.gpg
# or
gpg --passphrase <secretphrase> -o .netrc .netrc.gpg
ftp yourservername
rm .netrc

An example .netrc:

machine google.com
login <username>
password <secretpassword>

I actually keep a local hash and the original copy of these files on a different computer than the one I that I use the .netrc files on, and verify the hash of the .netrc and the script that I run, but that is above and beyond the OP's original question.

Solution 4

Use netrc. It is better than giving the password away on the command line.

View more solutions

Comments

[Basile Starynkevitch]

Use man ftp to find out, or maybe ftp --help. Don't forget that ftp may mean different utilities....

[Admin]

ftp ftp://username:[email protected]

[Admin]

You should also remember that the commandline of a given process is visible to all the other users on the system. Therefore, giving your password as a part of the commandline may be a serious security issue.

[slm]

Related - superuser.com/questions/937124/….

[Peter Mortensen]

This answer does not deserve a negative score (though it is lacking an example of how to do it).

[smaudet]

I agree - however nobody ever changed this (and I didn't downvote it).

[smaudet]

This isn't that useful because it requires interactive usage. I might as well just type 'ftp user@yourserver'.

[phil294]

this does not answer the question

[math]

This is the best answer, although it can be improved: (1) user credentials within a single command line will be stored in shell history => security issues. (2) .netrc works also without gpg => security issues. Also check that the .netrc file has correct permissions: chmod 600 .netrc (3) a shell function as wrapper around the decrypt, ftp call, and removal of decrypted .netrc would be helpful. Thank you for your great answer!

[Konrad]

So instead of the FTP password the user has to type the GPG passphrase? Also, if an attacker has write access to your personal files there are tons of ways of revealing your credentials as soon as you're using them. In that scenario GPG only really helps against an attacker with read-only access. Which is really rare, I guess?

[smaudet]

@Konrad So I'm less sure about the local files attach, but, no, and no, I think? passphrase is only for people who want that, it is a bit silly to trade a password for a password, however you can map many separate passwords to one password. Asymmetric you don't have to worry about any passphrase. Then you just use the first command, not the second (well you do, but just once). Your concerns about local are not warranted, gpg takes care of its own local file permissions. And if you are rooted it doesn't matter...

[Owl]

Yes, but how do you login, this connects, but it doesn't login it just drops you into a ftp> client shell.