From [email protected]  Thu Jul  1 03:38:43 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id DAA29881
       for <[email protected]>; Thu, 1 Jul 1999 03:38:43 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id DAA13403;
       Thu, 1 Jul 1999 03:28:59 -0500 (CDT)
Received: from plmail.parceline.co.uk ([195.224.86.68])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id DAA00911
       for <[email protected]>; Thu, 1 Jul 1999 03:26:57 -0500 (CDT)
Received: from [192.9.200.85] by plmail.parceline.co.uk
(Sun Internet Mail Server sims.3.5.1998.08.08.00.06)
with ESMTP id <[email protected]> for
[email protected]; Thu,  1 Jul 1999 09:23:07 +0100 (BST)
Message-Id: <[email protected]>
Date: Thu, 01 Jul 1999 09:26:16 +0100
Reply-To: [email protected]
Sender: [email protected]
From: Mukund Rajyaguru <[email protected]>
To: [email protected]
Subject: FTPconversions More help needed
MIME-version: 1.0
Content-type: text/plain; charset="US-ASCII"
Content-transfer-encoding: 7bit
X-Mailer: Microsoft Outlook Express for Macintosh - 4.01 (295)
X-Priority: 3
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN

Hello
   I am trying to setup a guest login that can send a tar file and be able
to untar it to the directory they are in.
   1) can this be done
   2) if it can how

I have checked the /www.landfield.com/wu-ftpd site with no luck. Any further
ideas.

I am new to ftp adminstration so any help would be useful.

Regards
Mukund Rajyaguru (Unix Support Techincian)

Phone: 0121 500 2537
Fax:   0121 500 2553

E-Mail: [email protected]

Regards
Mukund Rajyaguru (Senior Unix Support Techincian)

Phone: 0121 500 2537
Fax:   0121 500 2553

E-Mail: [email protected]

Parceline Web Page: www.parceline.co.uk


From [email protected]  Thu Jul  1 05:14:13 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id FAA00667
       for <[email protected]>; Thu, 1 Jul 1999 05:14:13 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id FAA05322;
       Thu, 1 Jul 1999 05:10:46 -0500 (CDT)
Received: from relay3.mail.uk.psi.net (relay3.mail.uk.psi.net [154.32.109.6])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id FAA04405
       for <[email protected]>; Thu, 1 Jul 1999 05:06:08 -0500 (CDT)
Received: from [154.32.19.85] (helo=candace.eoc.org.uk)
       by relay3.mail.uk.psi.net with smtp (Exim 2.12 #2)
       id 10zdjK-0003do-00
       for [email protected]; Thu, 1 Jul 1999 11:06:06 +0100
Received: (qmail 81867 invoked from network); 1 Jul 1999 10:07:19 -0000
Received: from bast.eoc.org.uk (172.16.65.8)
 by candace.eoc.org.uk with SMTP; 1 Jul 1999 10:07:19 -0000
Received: by bast.eoc.org.uk
       with MailBeamer v3.24 (WinNT 4.x Service) ;
       Thu, 1 Jul 1999 11:08:28 +0100
Message-Id: <[email protected]>
Date: Thu, 1 Jul 1999 11:08:00 +0100
Reply-To: [email protected]
Sender: [email protected]
From: Robin Bowes <[email protected]>
To: Gregory A Lundberg <[email protected]>
Cc: "[email protected]" <[email protected]>
Subject: RE: disable anonymous access for virtual
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
X-Mailer: MailBeamer v3.24 (WinNT 4.x Service)
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN

>
> Dunno what ftphosts has to do with it.  Never bother with the
> file myself. I don't care which host a user comes from just so the
correct
> password is given.

OK.  I guess I misunderstood the purpose of the hosts file.

>
> > virtual ftp.domain.com private
>
> I like IP numbers instead, but yes .. that's what you want to
> add.  Note you can do the same thing to the default server ...

I can't use IP numbers since the domains are virtual, ie running on the
same server with a single IP address.

>
> I'm assuming you have the vhost all set up and working and
> just want to add this feature.

Yes, I've taken over admin of a web-hosting service.

>  Otherwise, you'd best start by reading the FAQ and
> Kent's vhost document at the Resource Center.

I will check that out anyway.

Many thanks,

R.
--
Robin Bowes, System Development Manager, Equal Opportunities Commission,
Room 405A, Overseas House, Quay St., Manchester, M3 3HN, UK.
Tel: +44 (0) 161 838 8321  Fax: +44 (0) 161 835 1657

From [email protected]  Thu Jul  1 07:47:32 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id HAA02216
       for <[email protected]>; Thu, 1 Jul 1999 07:47:31 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id HAA01079;
       Thu, 1 Jul 1999 07:46:28 -0500 (CDT)
Received: from zam107.zam.kfa-juelich.de (zam107.zam.kfa-juelich.de [134.94.169.64])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id HAA20079
       for <[email protected]>; Thu, 1 Jul 1999 07:45:17 -0500 (CDT)
Received: (from zdv045@localhost) by zam107.zam.kfa-juelich.de (AIX4.3/UCB 8.8.8/8.8.8) id OAA35004 for [email protected]; Thu, 1 Jul 1999 14:44:54 +0200
Message-Id: <[email protected]>
Date: Thu, 1 Jul 1999 14:44:51 +0000
Reply-To: [email protected]
Sender: [email protected]
From: [email protected]
To: [email protected]
Subject: How to deny ftp subcommands
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
X-Mailer: Z-Mail (4.0.1 13Jan97)
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN

Hello all,
we have installed an anonymous ftp for simple data exchange with
two separate filesystems for incomming  and outgoing data.
Users are classified and have ReadOnly or WriteOnly access according
to their class. All works well with wu-ftp.
For these users we would like to restrict the ftp subcommands to a
basic set of  about 10 commands, no mput, no mget for example.
For these two I realize it by unix access rights. It works but
the user gets missleading messages like:
 ftp> mget a*
 Bad directory components
 can't find list of remote files, oops
or:
 ftp> nlist
 200 PORT command successful.
 150 Opening ASCII mode data connection for /bin/ls.
 226 Transfer complete.
but the list ist zero.

Is there any way to deny subcommands like I did with delete,
overwrite,...  in the ftpaccess file?

Any hints and ideas are appreciated

Greetings

--
Mit freundlichen Gruessen
Ulrike Schmidt

+----------------------------------------------------------------------+
| Ulrike Schmidt                                                       |
| Zentralinstitut fuer Angewandte Mathematik                           |
| Forschungszentrum Juelich GmbH                                       |
| D-52425 Juelich                                                      |
|                                           Phone: +49 02461 61-6577   |
| Email: [email protected]            Fax:   +49 02461 61-6656   |
+----------------------------------------------------------------------+

From [email protected]  Thu Jul  1 08:06:01 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id IAA02438
       for <[email protected]>; Thu, 1 Jul 1999 08:06:01 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id IAA19600;
       Thu, 1 Jul 1999 08:06:15 -0500 (CDT)
Received: from mail.vr.net ([email protected] [205.133.13.8])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id HAA10330
       for <[email protected]>; Thu, 1 Jul 1999 07:59:39 -0500 (CDT)
Received: from localhost (lundberg@localhost)
       by mail.vr.net (8.9.3/8.9.3) with ESMTP id IAA23872;
       Thu, 1 Jul 1999 08:59:18 -0400
Message-Id: <[email protected]>
Date: Thu, 1 Jul 1999 08:59:18 -0400 (EDT)
Reply-To: [email protected]
Sender: [email protected]
From: Gregory A Lundberg <[email protected]>
To: Robin Bowes <[email protected]>
Cc: "[email protected]" <[email protected]>
Subject: RE: disable anonymous access for virtual
In-Reply-To: <[email protected]>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN

On Thu, 1 Jul 1999, Robin Bowes wrote:

> > > virtual ftp.domain.com private
> >
> > I like IP numbers instead, but yes .. that's what you want to
> > add.  Note you can do the same thing to the default server ...
>
> I can't use IP numbers since the domains are virtual, ie running on the
> same server with a single IP address.

FTP (the protocol, not just WU-FTPD the daemon) won't work like this.  You
will need to assign an IP number for each virtual FTP host.

--

Gregory A Lundberg              Senior Partner, VRnet Company
1441 Elmdale Drive              [email protected]
Kettering, OH 45409-1615 USA    1-800-809-2195


From [email protected]  Thu Jul  1 08:08:10 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id IAA02518
       for <[email protected]>; Thu, 1 Jul 1999 08:08:09 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id IAA29620;
       Thu, 1 Jul 1999 08:07:11 -0500 (CDT)
Received: from pizza.hvu.nl (Pizza.hvu.nl [145.89.234.2])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id IAA10174
       for <[email protected]>; Thu, 1 Jul 1999 08:03:05 -0500 (CDT)
Received: (from koos@localhost) by pizza.hvu.nl (8.8.6/KH19980502 (dbm++)) id PAA06364 for [email protected]; Thu, 1 Jul 1999 15:03:03 +0200 (MET DST)
Message-Id: <[email protected]>
Date: Thu, 1 Jul 1999 15:03:03 +0200 (MET DST)
Reply-To: [email protected]
Sender: [email protected]
From: Koos van den Hout _U nix and we all_ <[email protected]>
To: [email protected]
Subject: Contents of wu-ftpd FAQ
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN

* Contents of the FAQ file for wu-ftpd. The complete file can be found at
http://www.cetis.hvu.nl/~koos/wu-ftpd-faq.html
Or, send mail to [email protected] with as subject "send faq"
(without the quotes, body ignored).

THE_URL:file://localhost/home/staff/koos/wu-ftpd-faq/wu-ftpd-faq.contents.html
   1. Contents of this FAQ
        1. Contents of this FAQ
        2. What is this document
        3. What is wu-ftpd itself and this mailing list in particular ?
             1. How do I subscribe/unsubscribe ?
             2. Is this list archived anywhere ?
             3. What are related documents ?
             4. Are there any alternatives ?
        4. Where do I get the wu-ftpd ?
             1. Where do I get the latest version ?
             2. What are the VR patches for wu-ftpd ?
             3. What is BeroFTPD ?
        5. Compiling the wu-ftpd
             1. cc complains about strunames, typenames, modenames, ..
                being undeclared.
             2. I don't have yacc
             3. wu-ftpd doesn't 'see' that users are in multiple groups.
             4. I get "conflicting types for `realpath'"
             5. wu-ftpd doesn't use the shadow passwords on my Linux
                machine.
             6. It doesn't compile at all on newer Linux installs. The
                error is :
             7. The timezone in the xferlog is wrong
             8. The timezone in the ls output is wrong
             9. Digital Unix doesn't log commands after an anonymous
                user logs in
            10. install fails with 'install: ..'
            11. Digital Unix (The Unix Formerly Known As OSF/1) and
                Enhanced C2 security,
            12. It doesn't compile at all on Digital Unix, errors about
                struct timeval
            13. What should I do to be able to use wu-ftpd in a HP-UX
                10.01
            14. What should I do for HP-UX 10.10 to make it work
                completely.
            15. Installation notes for HP-UX 10.20.
        6. Special compilation options/fixes
             1. I need to authenticate real users via AFS
             2. I need to use S/KEY authorisation
             3. I want to block certain default addresses (IE30User@,
                mozilla@)
        7. Installing the wu-ftpd
             1. Command-line options for wu-ftpd
             2. Testing on a different port number then ftp:21
             3. Not all command line parameters seem to be used by
                wu-ftpd
        8. Are there year 2000 issues with wu-ftpd?
        9. The ftpaccess file
             1. Some files (banners, etc) don't get shown to anonymous
                users.
             2. What is the exact format of the <times> parameter in the
                "limit"
             3. What tools are there to check the configuration
             4. Why does %M produce (Max unlimited) on the login banner
       10. Programs (ls, gzip, tar) work for real users, not for
           anonymous users, giving errors like 425 Can't create data
           socket (0.0.0.0,20): Bad file number or simply no output.
             1. Solaris
             2. Building a statically linked ls for Solaris fails
             3. Linux
             4. Dec OSF
             5. SunOS4.1.x
             6. AIX
             7. IRIX (5.3, 6.2)
             8. SCO Unix
             9. BSD vs SVR4 ls
            10. It worked, until I upgraded the operating system.
       11. Running wu-ftpd
             1. ftpd allways says "221 Server shutting down. Goodbye."
             2. Anonymous ftp works fine, but real users are denied
                access
             3. ftpconversions doesn't work
             4. On-the-fly compression works, on-the-fly tarring, but
                not both.
             5. I want to use zip compression (InfoZip)
             6. I want a real user to be able to access the host only
                via ftp, not via telnet
             7. Somebody uploaded a file with a weird name
             8. I want anonymous users to be able to upload files, but
                in the most secure manner possible
             9. The default umask used when a real user uploads a file
                is wrong
            10. I heard something about 'SITE EXEC' having a security
                hole
            11. How do I make reports more readable ?
            12. Incoming file transfers fail with SunOS and an NFS
                mounted incoming
            13. Normal ftp clients work, Netscape ftp's fail. So,
                passive mode doesn't work.
            14. I made a symbolic link within the anonymous tree and it
                doesn't work for the anonymous users.
            15. I want to redirect anonymous users to another machine
            16. ftpd stops accepting connections when a lot of
                connections come in.
            17. Running wu-ftpd on a *large* site
            18. Only the first 8 characters of the anonymous username
                are recieved by the server.
            19. wu-ftpd fails with '500 Illegal PORT Command' under AIX
                4.3
            20. I want to host multiple ftp servers on the same machine
            21. I just upgraded and now nobody can log in. It worked
                before.
       12. Other things
             1. Where is the FTP protocol documented ?
             2. How can I make my ftp-archive accessible by Email
                (ftpmail) ?
       13. Credits/miscellanious
             1. How do I contact the WU-FTPD Development team
             2. I have a correction / new feature, how do I submit it
                for the WU-FTPD Development team's consideration
             3. I have what I believe to be a critical security problem
                with the daemon and don't want to talk about it via
                email. Can I call someone on the telephone

---------------------------------------------------------------------------


From [email protected]  Thu Jul  1 08:12:00 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id IAA02651
       for <[email protected]>; Thu, 1 Jul 1999 08:11:59 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id IAA02633;
       Thu, 1 Jul 1999 08:12:09 -0500 (CDT)
Received: from mail.vr.net ([email protected] [205.133.13.8])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id IAA25225
       for <[email protected]>; Thu, 1 Jul 1999 08:08:29 -0500 (CDT)
Received: from localhost (lundberg@localhost)
       by mail.vr.net (8.9.3/8.9.3) with ESMTP id JAA23991;
       Thu, 1 Jul 1999 09:08:21 -0400
Message-Id: <[email protected]>
Date: Thu, 1 Jul 1999 09:08:20 -0400 (EDT)
Reply-To: [email protected]
Sender: [email protected]
From: Gregory A Lundberg <[email protected]>
To: Paradise Cowgirl <[email protected]>
Cc: [email protected], [email protected]
Subject: Re: Request for Comments on "A How-To Guide"
In-Reply-To: <[email protected]>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN

On Wed, 30 Jun 1999, Paradise Cowgirl wrote:

> I'll be working on updating "A How-To Guide for wu-ftpd on Solaris
> 2.x" (http://www.wildheart.org/wu-ftpd/). If you have questions or
> comments that you would like to be addressed and/or included, please
> contact me at [email protected].

There is one from the devepment group at

ftp://ftp.wu-ftpd.org/pub/wu-ftpd/binaries/sun/solaris/how_to_setup_an_ftp_server

--

Gregory A Lundberg              Senior Partner, VRnet Company
1441 Elmdale Drive              [email protected]
Kettering, OH 45409-1615 USA    1-800-809-2195


From [email protected]  Thu Jul  1 08:13:44 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id IAA02684
       for <[email protected]>; Thu, 1 Jul 1999 08:13:43 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id IAA00979;
       Thu, 1 Jul 1999 08:12:43 -0500 (CDT)
Received: from mail.vr.net ([email protected] [205.133.13.8])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id IAA03905
       for <[email protected]>; Thu, 1 Jul 1999 08:11:19 -0500 (CDT)
Received: from localhost (lundberg@localhost)
       by mail.vr.net (8.9.3/8.9.3) with ESMTP id JAA24048;
       Thu, 1 Jul 1999 09:11:08 -0400
Message-Id: <[email protected]>
Date: Thu, 1 Jul 1999 09:11:07 -0400 (EDT)
Reply-To: [email protected]
Sender: [email protected]
From: Gregory A Lundberg <[email protected]>
To: Mukund Rajyaguru <[email protected]>
Cc: [email protected]
Subject: Re: FTPconversions More help needed
In-Reply-To: <[email protected]>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN

On Thu, 1 Jul 1999, Mukund Rajyaguru wrote:

> I am trying to setup a guest login that can send a tar file and be
> able to untar it to the directory they are in.
>     1) can this be done
>     2) if it can how
>
> I have checked the /www.landfield.com/wu-ftpd site with no luck. Any
> further ideas.

You can have the daemon take an entire directory, tar it, optionally
compress or gzip it, and sent the result to the remote users.  TO set this
up, install ~ftp/bin/tar following the same procedure as you would to
install ~ftp/bin/ls from the FAQ.

You can *NOT* have the daemon take an existing tarball, untar it, and have
teh remote client receive the individual files.  That is a client-side
problem and I know of no clients which will do it automatically but you
could look.

--

Gregory A Lundberg              Senior Partner, VRnet Company
1441 Elmdale Drive              [email protected]
Kettering, OH 45409-1615 USA    1-800-809-2195


From [email protected]  Thu Jul  1 08:18:34 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id IAA02769
       for <[email protected]>; Thu, 1 Jul 1999 08:18:33 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id IAA17766;
       Thu, 1 Jul 1999 08:18:32 -0500 (CDT)
Received: from mail.vr.net ([email protected] [205.133.13.8])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id IAA01092
       for <[email protected]>; Thu, 1 Jul 1999 08:14:22 -0500 (CDT)
Received: from localhost (lundberg@localhost)
       by mail.vr.net (8.9.3/8.9.3) with ESMTP id JAA24073;
       Thu, 1 Jul 1999 09:13:49 -0400
Message-Id: <[email protected]>
Date: Thu, 1 Jul 1999 09:13:49 -0400 (EDT)
Reply-To: [email protected]
Sender: [email protected]
From: Gregory A Lundberg <[email protected]>
To: [email protected]
Cc: [email protected]
Subject: Re: How to deny ftp subcommands
In-Reply-To: <[email protected]>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN

On Thu, 1 Jul 1999 [email protected] wrote:

> we have installed an anonymous ftp for simple data exchange with two
> separate filesystems for incomming and outgoing data. Users are
> classified and have ReadOnly or WriteOnly access according to their
> class. All works well with wu-ftp.

> For these users we would like to restrict the ftp subcommands to a
> basic set of about 10 commands, no mput, no mget for example.

mput and mget are client-side commands.  The daemon cannot help you there.

To disable specific FTP commands: "Happy hacking."

> For these two I realize it by unix access rights. It works but
> the user gets missleading messages like:
>   ftp> mget a*
>   Bad directory components
>   can't find list of remote files, oops
> or:
>   ftp> nlist
>   200 PORT command successful.
>   150 Opening ASCII mode data connection for /bin/ls.
>   226 Transfer complete.
> but the list ist zero.
>
> Is there any way to deny subcommands like I did with delete,
> overwrite,...  in the ftpaccess file?

Nope.

BTW, you're asking the wrong question.  What you should be asking is "Why
is this failing?"  Which is a FAQ, "Why does ls not work?".

The location of the latest version of wu-ftpd can be found in the
directory

     ftp://ftp.wu-ftpd.org/pub/wu-ftpd/

wu-ftpd Resource Center:  http://www.landfield.com/wu-ftpd/
wu-ftpd FAQ:              http://www.cetis.hvu.nl/~koos/wu-ftpd-faq.html
wu-ftpd list archive:     http://www.landfield.com/wu-ftpd/mail-archive/

--

Gregory A Lundberg              Senior Partner, VRnet Company
1441 Elmdale Drive              [email protected]
Kettering, OH 45409-1615 USA    1-800-809-2195


From [email protected]  Thu Jul  1 08:45:59 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id IAA03228
       for <[email protected]>; Thu, 1 Jul 1999 08:45:58 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id IAA22857;
       Thu, 1 Jul 1999 08:46:09 -0500 (CDT)
Received: from mail.vr.net ([email protected] [205.133.13.8])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id IAA22609;
       Thu, 1 Jul 1999 08:40:33 -0500 (CDT)
Received: (from lundberg@localhost)
       by mail.vr.net (8.9.3/8.9.3) id JAA24413;
       Thu, 1 Jul 1999 09:40:30 -0400
Message-Id: <[email protected]>
Date: Tue, 29 Jun 1999 12:55:09 GMT
Reply-To: [email protected]
Sender: [email protected]
From: Gregory A Lundberg <[email protected]>
To: WUFTPD Questions <[email protected]>,
       WUFTPD Discussion List <[email protected]>,
       WUFTPD Announcements <[email protected]>,
       WUFTPD Announcements <[email protected]>
Subject: WU-FTPD Mirrors
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN

The primary distribution site for the WU-FTPD daemon is:

 ftp://ftp.wu-ftpd.org/pub/wu-ftpd/

Mirrors are available at the following sites:

Austria
-------
   ftp://gd.tuwien.ac.at/infosys/servers/ftp/wu-ftpd/
   http://gd.tuwien.ac.at/infosys/servers/ftp/wu-ftpd/

Canada
------
   ftp://ftp.crc.ca/pub/packages/ftp/servers/wuarchive-ftpd-vr/

Estonia
-------
   ftp://ftp.ut.ee/pub/unix/networking/wu-ftpd/

Hungary
-------
   ftp://ftp.ahol.com/pub/mirrors/wu-ftpd/
   ftp://ftp.kfki.hu/pub/infosystems/wu-ftpd/

Germany
-------
   ftp://ftp.dpn.de/pub/mirrors/wu-ftpd/

Israel
------
   ftp://ftp.tau.ac.il/pub/unix/ftp/wu-ftpd/

Japan
-----

   Ring Server Project
   -------------------
       ftp://ftp.ring.gr.jp/pub/net/wu-ftpd/
       http://www.ring.gr.jp/archives/net/wu-ftpd/

       ftp://ring.aist.go.jp/pub/net/wu-ftpd/
       http://ring.aist.go.jp/archives/net/wu-ftpd/

       ftp://ring.asahi-net.or.jp/pub/net/wu-ftpd/
       http://ring.asahi-net.or.jp/archives/net/wu-ftpd/

       ftp://ring.so-net.ne.jp/pub/net/wu-ftpd/
       http://ring.so-net.ne.jp/archives/net/wu-ftpd/

       ftp://ring.nacsis.ac.jp/pub/net/wu-ftpd/
       http://ring.nacsis.ac.jp/archives/net/wu-ftpd/

       ftp://ring.etl.go.jp/pub/net/wu-ftpd/
       http://ring.etl.go.jp/archives/net/wu-ftpd/

   Other Japan sites
   -----------------
   ftp://ftp.win.ne.jp/pub/network/wu-ftpd/

   ftp://mirror.nucba.ac.jp/mirror/wu-ftpd/
   http://mirror.nucba.ac.jp/mirror/wu-ftpd/

   ftp://ftp.cin.nihon-u.ac.jp/pub/net/ftp/wu-ftpd-vr/

   ftp://ftp.riken.go.jp/pub/net/wu-ftpd/

   http://SunSITE.sut.ac.jp/pub/archives/packages/wu-ftpd/
   ftp://SunSITE.sut.ac.jp/pub/archives/packages/wu-ftpd/

Poland
------
   ftp://ftp.task.gda.pl/pub/unix/ftp/wu-ftpd-vr/

Spain
-----
   ftp://ftp.upc.es/pub/wu-ftpd/

Sweden
------
   ftp://ftp.sunet.se/pub/nir/ftp/servers/wuarchive-ftpd-vr/
   http://ftp.sunet.se/pub/nir/ftp/servers/wuarchive-ftpd-vr/

Switzerland
-----------
   ftp://sunsite.cnlab-switch.ch/mirror/wu-ftpd/

Taiwan
------
   ftp://ftp.nchu.edu.tw/pub/packages/wu-ftpd/
   http://pds.nchu.edu.tw/pub/packages/wu-ftpd/

Turkey
------
   ftp://ftp.ulak.net.tr/pub/wu-ftpd/
   http://ftp.ulak.net.tr/pub/wu-ftpd/

United Kingdom
--------------
   ftp://sunsite.org.uk/Mirrors/ftp.vr.net/pub/wu-ftpd/
   http://sunsite.org.uk/Mirrors/ftp.vr.net/pub/wu-ftpd/

   ftp://ftp.ox.ac.uk/pub/comp/security/COAST/mirrors/ftp.vr.net/

United States
-------------

   New York
   --------
       ftp://ftp.academy.rpi.edu/pub/wu-ftpd/

   Ohio
   ----
       ftp://ftp.vr.net/pub/wu-ftpd/

   Texas
   -----
       ftp://ftp.landfield.com/wu-ftpd/wu-ftpd.org/
       http://www.landfield.com/wu-ftpd/wu-ftpd.org/

If you run a mirror and would like it listed above, send the URL to
[email protected].  Unless your local policy requires it, there is
no need to ask permission to mirror the primary distribution site.  We do
like knowing who is mirroring, though.

From [email protected]  Thu Jul  1 08:47:06 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id IAA03267
       for <[email protected]>; Thu, 1 Jul 1999 08:47:06 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id IAA11909;
       Thu, 1 Jul 1999 08:47:16 -0500 (CDT)
Received: from winonacc01.lbsna.com (lucas-body-system-na.WillowSprings.cw.net [166.48.32.86])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id IAA15202
       for <[email protected]>; Thu, 1 Jul 1999 08:42:59 -0500 (CDT)
Received: by WinonaCC01 with Internet Mail Service (5.5.2448.0)
       id <3CBXY7JM>; Thu, 1 Jul 1999 08:40:20 -0500
Message-Id: <C051872F12B3D2118DF300805FEDF3E5C1BAB7@WinonaCC01>
Date: Thu, 1 Jul 1999 08:38:47 -0500
Reply-To: [email protected]
Sender: [email protected]
From: "Shimek, Kirk" <[email protected]>
To: "'[email protected]'" <[email protected]>
Cc: [email protected]
Subject: RE: FTPconversions More help needed
MIME-Version: 1.0
Content-Type: text/plain
X-Mailer: Internet Mail Service (5.5.2448.0)
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN

Just a quick suggestion - this assumes that it is not a lot of clients
and that you have the access / authority to modify the clients . . .

Write a short cron job / script that will, at scheduled intervals, look
in a specified directory for a tarball . . . when it finds it will then
untar it.  Again this assumes that these clients are under your
control.


Kirk Shimek
Lucas Body Systems
507-457-3750 ext.8241



On Thu, 1 Jul 1999, Mukund Rajyaguru wrote:

> I am trying to setup a guest login that can send a tar file and be
> able to untar it to the directory they are in.
>     1) can this be done
>     2) if it can how
>
> I have checked the /www.landfield.com/wu-ftpd site with no luck. Any
> further ideas.

You can have the daemon take an entire directory, tar it, optionally
compress or gzip it, and sent the result to the remote users.  TO set this
up, install ~ftp/bin/tar following the same procedure as you would to
install ~ftp/bin/ls from the FAQ.

You can *NOT* have the daemon take an existing tarball, untar it, and have
teh remote client receive the individual files.  That is a client-side
problem and I know of no clients which will do it automatically but you
could look.

--

Gregory A Lundberg              Senior Partner, VRnet Company
1441 Elmdale Drive              [email protected]
Kettering, OH 45409-1615 USA    1-800-809-2195


Kirk Shimek Systems Engineer / UNIX Prog.
Lucas Body Systems
507-457-3750 ext.8241



From [email protected]  Thu Jul  1 09:23:53 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id JAA04030
       for <[email protected]>; Thu, 1 Jul 1999 09:23:52 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id JAA14302;
       Thu, 1 Jul 1999 09:24:13 -0500 (CDT)
Received: from mgate2.uni-hannover.de ([email protected] [130.75.2.5])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id JAA13051
       for <[email protected]>; Thu, 1 Jul 1999 09:18:22 -0500 (CDT)
Received: from sun10.ipi.uni-hannover.de by mgate2.uni-hannover.de
         with LocalSMTP (PP) with ESMTP; Thu, 1 Jul 1999 16:16:56 +0200
Received: (from bolte@localhost) by sun10.ipi.uni-hannover.de (8.8.8/8.8.8)
         id QAA24269 for [email protected];
         Thu, 1 Jul 1999 16:16:33 +0200 (MET DST)
Message-Id: <[email protected]>
Date: Thu, 1 Jul 1999 16:16:33 +0200 (MET DST)
Reply-To: [email protected]
Sender: [email protected]
From: Uwe Bolte <[email protected]>
To: [email protected]
Subject: How to use pkgadd with wu-ftpd-2.5.0.tar
X-Sun-Charset: US-ASCII
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN

Hello,

I try to install wu-ftpd-2.5.0 on Solaris 2.5.

First I use
 pkgadd -d WUFtpd250.wu-ftpd-2.5.0.SPARC.ULTRASparc.2.5.1.2.5.pkg.tar
pkgadd: ERROR: attempt to process datastream failed
   - bad format in datastream table-of-contents

Then I unpack the tar file with
 tar xvf WUFtpd250...pkg.tar.
After I tried several pkgadd options, nothing worked.

What make I wrong?

Thank you for your help!

Greetings,

Uwe     [email protected]

From [email protected]  Thu Jul  1 09:44:11 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id JAA04348
       for <[email protected]>; Thu, 1 Jul 1999 09:44:10 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id JAA07987;
       Thu, 1 Jul 1999 09:44:25 -0500 (CDT)
Received: from pizza.hvu.nl (Pizza.hvu.nl [145.89.234.2])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id JAA17693
       for <[email protected]>; Thu, 1 Jul 1999 09:42:30 -0500 (CDT)
Received: (from koos@localhost) by pizza.hvu.nl (8.8.6/KH19980502 (dbm++)) id QAA09456; Thu, 1 Jul 1999 16:42:13 +0200 (MET DST)
Message-Id: <[email protected]>
Date: Thu, 1 Jul 1999 16:42:13 +0200
Reply-To: [email protected]
Sender: [email protected]
From: Koos van den Hout _U nix and we all_ <[email protected]>
To: Uwe Bolte <[email protected]>
Cc: [email protected]
Subject: Re: How to use pkgadd with wu-ftpd-2.5.0.tar
In-Reply-To: <[email protected]>; from Uwe Bolte on Thu, Jul 01, 1999 at 04:16:33PM +0200
References: <[email protected]>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
X-Mailer: Mutt 0.95i
X-Zen: Ommmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmm
X-Files: the truth is out there
X-I-Am-Not-Simes: There is only one Simes
X-Confirm-reading-to: [email protected]
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN

Quoting Uwe Bolte who wrote on Thu, Jul 01, 1999 at 04:16:33PM +0200:

> First I use
>   pkgadd -d WUFtpd250.wu-ftpd-2.5.0.SPARC.ULTRASparc.2.5.1.2.5.pkg.tar
> pkgadd: ERROR: attempt to process datastream failed
>     - bad format in datastream table-of-contents
>
> Then I unpack the tar file with
>   tar xvf WUFtpd250...pkg.tar.
> After I tried several pkgadd options, nothing worked.

Unpack the tar into an empty directory which will then have a subdirectory
named WUFtpd250

Do not enter this directory, but type 'pkgadd -d .', you will get
something like:

# pkgadd -d .

The following packages are available:
 1  WUFtpd250     wu-ftpd 2.5.0 SPARC/ULTRAsparc 2.5.1 - 2.5
                  (sun4c,sun4d,sun4e,sun4m,sun4u,sun4u1) 2.5.0

Select package(s) you wish to process (or 'all' to process
all packages). (default: all) [?,??,q]:

pkgadd can be a bit hairy.
                                        Koos

--
Koos van den Hout                    Expertisecentrum Cetis http://cetis.nl/
[email protected] (Work)                     Workphonenumber: +31-30-2586287
[email protected] (Home)                   Workfaxnumber: +31-30-2586290
http://web.cetis.hvu.nl/~koos/  PGP keyid RSA/1024 0xCA845CB5 via keyservers

From [email protected]  Thu Jul  1 10:55:40 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id KAA05448
       for <[email protected]>; Thu, 1 Jul 1999 10:55:40 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id KAA27873;
       Thu, 1 Jul 1999 10:55:21 -0500 (CDT)
Received: from sco.COM (scol.london.sco.COM [150.126.1.48])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id KAA03057
       for <[email protected]>; Thu, 1 Jul 1999 10:54:33 -0500 (CDT)
Received: from tyne.london.sco.COM(150.126.1.103), claiming to be "tyne.sco.com"
via SMTP by scol.london.sco.COM, id smtpdAAAa003on; Thu Jul  1 16:22:17 1999
Message-Id: <[email protected]>
Date: Thu, 1 Jul 99 16:21:33 BST
Reply-To: [email protected]
Sender: [email protected]
From: Ian Willis <[email protected]>
To: [email protected]
Cc: [email protected]
Subject: Re: FTPconversions More help needed
X-Mailer: SCO OpenServer Mail Release 5.0
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN

You can make the standard BSD ftp client extract a compressed tar
archive it receives from the ftp daemon:

get dirname.tar.Z |"zcat - | tar xvf -"

To avoid having to type this every time, define an ftp macro in
$HOME/.netrc, for example:

default
macdef xget
get $1.tar.Z |"zcat - | tar xvf -"


In ftp you would then execute:
$xget dirname

Ian Willis
SCO Internet Engineering Group, Watford, England

From [email protected]  Thu Jul  1 11:02:00 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id LAA05537
       for <[email protected]>; Thu, 1 Jul 1999 11:01:59 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id LAA08253;
       Thu, 1 Jul 1999 11:01:33 -0500 (CDT)
Received: from matadore.montereyhigh.com ([205.155.37.124])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id KAA01244
       for <[email protected]>; Thu, 1 Jul 1999 10:58:15 -0500 (CDT)
Received: from localhost (atrus@localhost)
       by matadore.montereyhigh.com (8.9.3/8.9.3) with ESMTP id JAA01674
       for <[email protected]>; Thu, 1 Jul 1999 09:34:40 GMT
       (envelope-from [email protected])
Message-Id: <Pine.BSF.4.10.9907010925150.1626-100000@matadore.montereyhigh.com>
Date: Thu, 1 Jul 1999 09:34:40 +0000 (GMT)
Reply-To: [email protected]
Sender: [email protected]
From: Yann Ramin <[email protected]>
To: [email protected]
Subject: Blank FTP Directories
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN


Here is a fun question:

I've recently set up a machine with wu-ftpd.  I've enabled path filters
(so a /./ will limit their ftp browsing abilities) with the following
config lines:


# path-filter...
path-filter  anonymous  /etc/pathmsg  ^[-A-Za-z0-9_\.]*$  ^\.  ^-
path-filter  guest      /etc/pathmsg  ^[-A-Za-z0-9_\.]*$  ^\.  ^-

# specify which group of users will be treated as "guests".
guestgroup faculty
guestgroup students

It seems that any user in a guest group automaticly gets shown a blank
directory (not just the home, but any directory) regardless of the ftp
client (command-line, Netscape...).  Has anyone had this problem before?

Thanks, Yann


From [email protected]  Thu Jul  1 11:33:44 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id LAA06005
       for <[email protected]>; Thu, 1 Jul 1999 11:33:44 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id LAA25509;
       Thu, 1 Jul 1999 11:33:47 -0500 (CDT)
Received: from mail.vr.net ([email protected] [205.133.13.8])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id LAA27533
       for <[email protected]>; Thu, 1 Jul 1999 11:31:15 -0500 (CDT)
Received: (from lundberg@localhost)
       by mail.vr.net (8.9.3/8.9.3) id MAA26794;
       Thu, 1 Jul 1999 12:30:49 -0400
Message-Id: <[email protected]>
Date: Thu, 1 Jul 1999 12:30:49 -0400
Reply-To: [email protected]
Sender: [email protected]
From: Gregory A Lundberg <[email protected]>
To: Yann Ramin <[email protected]>
Cc: [email protected]
Subject: Re: Blank FTP Directories
In-Reply-To: <Pine.BSF.4.10.9907010925150.1626-100000@matadore.montereyhigh.com>; from Yann Ramin on Thu, Jul 01, 1999 at 09:34:40AM +0000
References: <Pine.BSF.4.10.9907010925150.1626-100000@matadore.montereyhigh.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
X-Mailer: Mutt 0.95.6i
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN

On Thu, Jul 01, 1999 at 09:34:40AM +0000, Yann Ramin wrote:

> I've recently set up a machine with wu-ftpd.  I've enabled path filters
> (so a /./ will limit their ftp browsing abilities) with the following
> config lines:

This is NOT what path-filter does.  It limits the pathnames they may use
for uploads; not the names they may "browse" to.

> It seems that any user in a guest group automaticly gets shown a blank
> directory (not just the home, but any directory) regardless of the ftp
> client (command-line, Netscape...).  Has anyone had this problem before?

This is probably because you didn't follow the instructions in the Guest
HOWTO.

--

Gregory A Lundberg              Senior Partner, VRnet Company
1441 Elmdale Drive              [email protected]
Kettering, OH 45409-1615 USA    1-800-809-2195

From [email protected]  Thu Jul  1 11:54:32 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id LAA06313
       for <[email protected]>; Thu, 1 Jul 1999 11:54:32 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id LAA02511;
       Thu, 1 Jul 1999 11:54:27 -0500 (CDT)
Received: from smtp0.mindspring.com (smtp0.mindspring.com [207.69.200.30])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id LAA05222
       for <[email protected]>; Thu, 1 Jul 1999 11:51:50 -0500 (CDT)
Received: from mindspring.com (pool-209-138-211-16.snfr.grid.net [209.138.211.16])
       by smtp0.mindspring.com (8.8.5/8.8.5) with ESMTP id MAA03406;
       Thu, 1 Jul 1999 12:51:41 -0400 (EDT)
Message-Id: <[email protected]>
Date: Thu, 01 Jul 1999 09:51:42 -0700
Reply-To: [email protected]
Sender: [email protected]
From: Paradise Cowgirl <[email protected]>
To: [email protected]
Cc: [email protected]
Subject: Re: Request for Comments on "A How-To Guide"
References: <[email protected]>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
X-Sender: [email protected]
X-Mailer: Mozilla 4.6 [en] (X11; I; SunOS 5.7 i86pc)
X-Accept-Language: en
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN


> On Wed, 30 Jun 1999, Paradise Cowgirl wrote:
>
> I'll be working on updating "A How-To Guide for wu-ftpd on Solaris
> 2.x" (http://www.wildheart.org/wu-ftpd/). If you have questions or
> comments that you would like to be addressed and/or included, please
> contact me at [email protected].

Hello, all,

For some reason, DNS for my site is being a little strange -- you can
use the IP address for the above url: http://206.163.211.36/wu-ftpd/

Cheers,
~Darci

--
moment of peace like brief arctic bloom
red gold ripple of the sun going down
line of black hills makes my bed
sky full of love pulled over my head                    -Bruce Cockburn

From [email protected]  Thu Jul  1 12:01:05 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id MAA06383
       for <[email protected]>; Thu, 1 Jul 1999 12:01:04 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id MAA28470;
       Thu, 1 Jul 1999 12:01:02 -0500 (CDT)
Received: from matadore.montereyhigh.com ([205.155.37.124])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id LAA17846
       for <[email protected]>; Thu, 1 Jul 1999 11:54:10 -0500 (CDT)
Received: from localhost (atrus@localhost)
       by matadore.montereyhigh.com (8.9.3/8.9.3) with ESMTP id KAA02298
       for <[email protected]>; Thu, 1 Jul 1999 10:32:07 GMT
       (envelope-from [email protected])
Message-Id: <Pine.BSF.4.10.9907011025450.2279-100000@matadore.montereyhigh.com>
Date: Thu, 1 Jul 1999 10:32:06 +0000 (GMT)
Reply-To: [email protected]
Sender: [email protected]
From: Yann Ramin <[email protected]>
To: [email protected]
Subject: Blank Directories - fixed
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN


Thanks for pointing out the Guest FAQ (I didn't know it existed).  I've
gotten ftp working properly.  Thanks for your help


From [email protected]  Thu Jul  1 12:12:42 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id MAA06591
       for <[email protected]>; Thu, 1 Jul 1999 12:12:41 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id MAA14924;
       Thu, 1 Jul 1999 12:12:31 -0500 (CDT)
Received: from stout.avnet.com ([12.9.139.171])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id MAA28399
       for <[email protected]>; Thu, 1 Jul 1999 12:06:36 -0500 (CDT)
Received: from dev.avnet.com ([email protected] [12.9.139.43])
       by stout.avnet.com (8.9.0.Beta3/8.9.0.Beta3) with ESMTP id KAA26121
       for <[email protected]>; Thu, 1 Jul 1999 10:05:51 -0700 (MST)
Received: from az101-nt-imc1.avnet.com (az101-nt-imc1.avnet.com [10.2.248.13])
       by dev.avnet.com (8.8.6 (PHNE_14041)/8.8.6) with ESMTP id KAA27008
       for <[email protected]>; Thu, 1 Jul 1999 10:05:50 -0700 (MST)
Received: by az101-nt-imc1.avnet.com with Internet Mail Service (5.0.1460.8)
       id <N34MYR78>; Thu, 1 Jul 1999 10:05:50 -0700
Message-Id: <[email protected]>
Date: Thu, 1 Jul 1999 10:05:48 -0700
Reply-To: [email protected]
Sender: [email protected]
From: "Thunem, Tom" <[email protected]>
To: [email protected]
Subject: latest release for HPUX 11.0
MIME-Version: 1.0
Content-Type: text/plain
X-Mailer: Internet Mail Service (5.0.1460.8)
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN

Hello,

does anyone know where I can find the latest wu-ftpd release for HPUX 11.0?
I have looked in the mirrors but the /pub/binaries/hp/ux directory only
contains the .notar and README files.

Thanks

Tom Thunem
Internet Support
Avnet, Inc.
[email protected]


From [email protected]  Fri Jul  2 08:22:12 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id IAA21119
       for <[email protected]>; Fri, 2 Jul 1999 08:22:12 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id IAA01806;
       Fri, 2 Jul 1999 08:20:39 -0500 (CDT)
Resent-Date: Fri, 2 Jul 1999 08:20:39 -0500 (CDT)
Resent-Message-Id: <[email protected]>
Received: from mail.vr.net ([email protected] [205.133.13.8])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id IAA19422
       for <[email protected]>; Fri, 2 Jul 1999 08:14:20 -0500 (CDT)
Received: (from lundberg@localhost)
       by mail.vr.net (8.9.3/8.9.3) id JAA06549
       for [email protected]; Fri, 2 Jul 1999 09:14:05 -0400
Message-Id: <[email protected]>
Date: Fri, 2 Jul 1999 09:09:48 -0400
Reply-To: Gregory A Lundberg <[email protected]>
Sender: [email protected]
From: Gregory A Lundberg <[email protected]>
To: Bernhard Dobbels <[email protected]>
Subject: Re: More than one daemon
Resent-To: WU-FTPD Discussion List <[email protected]>
In-Reply-To: <[email protected]>; from Bernhard Dobbels on Fri, Jul 02, 1999 at 12:56:20PM +0200
References: <[email protected]>
Mime-Version: 1.0
Content-Type: multipart/signed; boundary=+HP7ph2BbKc20aGI; micalg=pgp-md5;
       protocol="application/pgp-signature"
Resent-From: [email protected]
X-Mailer: Mutt 0.95.6i
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN


--+HP7ph2BbKc20aGI
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable

On Fri, Jul 02, 1999 at 12:56:20PM +0200, Bernhard Dobbels wrote:

> I'd like to run more than one daemon on different ports.  How can i say
> to wu-ftpd where (s)he has to look for the config files for that port?
> Didn't found any option in the man page.=20

Compile a new version of the daemon for use on the other port, change the
file location(s) in src/pathnames.h

While it's not the latest-and-greatest (yet), you could try BeroFTPD.  I'm
not sure it supports everything you need, but it's work a look-see.

--=20

Gregory A Lundberg              WU-FTPD Development Group
1441 Elmdale Drive              [email protected]
Kettering, OH 45409-1615 USA    1-800-809-2195

--+HP7ph2BbKc20aGI
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: 2.6.2

iQB1AwUBN3y6FA2nXFkJc83RAQGMKwL/U3ss3QK2W8RWRZX5SVPZFJ1T8JRdbZCk
P5kgCxSZnph2+p+//fq7kGQztYVq/qu6bMaZss2mQ40ECDJtp8d5x8l/s4RMFtwH
2xEnrP/0Ge7HHj+4cSKaZT5z4N4IRPKF
=IUp+
-----END PGP SIGNATURE-----

--+HP7ph2BbKc20aGI--

From [email protected]  Fri Jul  2 08:30:57 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id IAA21245
       for <[email protected]>; Fri, 2 Jul 1999 08:30:56 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id IAA07312;
       Fri, 2 Jul 1999 08:31:01 -0500 (CDT)
Received: from inf.rl.ac.uk (nfs1.inf.rl.ac.uk [130.246.72.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id IAA00169
       for <[email protected]>; Fri, 2 Jul 1999 08:21:09 -0500 (CDT)
Received: from [130.246.73.193] (blue.cis.rl.ac.uk [130.246.73.193])
       by inf.rl.ac.uk (8.8.8/8.8.8) with ESMTP id OAA15091
       for <[email protected]>; Fri, 2 Jul 1999 14:20:36 +0100 (BST)
Message-Id: <v04020a02b3a25cda33ae@[130.246.73.193]>
Date: Fri, 2 Jul 1999 14:21:19 +0100
Reply-To: [email protected]
Sender: [email protected]
From: Neil Calton <[email protected]>
To: [email protected]
Subject: Unable to see files via a web browser
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
X-Sender: [email protected]
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN

I have installed wu-ftpd-2.5.0 on a Sun running Solaris 2.7.
Everything seems to work when using an ftp client from another
Unix box, i.e anonymous and real access is accepted.

However, when trying to use FTP from a web browser then
none of the files are visible. The README file I have put in the ~/ftp/pub
directory is displayed but the user cannot see any files.

I have set the permissions on ~ftp/dev/tcp to be 666 as the FAQ suggests
but to no avail. Has anyone got any suggestions as to what else I might
need to do.

Thanks,
       Neil Calton
Neil Calton                                       INTERNET:  [email protected]
Information  Technology               JANET:     [email protected]
Department                                     Tel: +44 1235 44 5740
Rutherford Appleton Lab.            Fax: +44 1235 44 5893
Chilton, Didcot, Oxon
OX11 0QX , England
URL: http://www.dci.clrc.ac.uk/Person.asp?N.B.M.Calton

From [email protected]  Fri Jul  2 08:32:48 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id IAA21278
       for <[email protected]>; Fri, 2 Jul 1999 08:32:47 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id IAA22704;
       Fri, 2 Jul 1999 08:31:41 -0500 (CDT)
Received: from wukon.appliedtheory.com ([email protected] [204.168.18.26])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id IAA03025
       for <[email protected]>; Fri, 2 Jul 1999 08:21:55 -0500 (CDT)
Received: from wukon.appliedtheory.com (IDENT:jreed@localhost [127.0.0.1])
       by wukon.appliedtheory.com (8.9.1/8.9.1) with ESMTP id JAA18179
       for <[email protected]>; Fri, 2 Jul 1999 09:21:54 -0400
Message-Id: <[email protected]>
Date: Fri, 02 Jul 1999 09:21:53 -0400
Reply-To: [email protected]
Sender: [email protected]
From: [email protected]
To: [email protected]
Subject: getting upload restrictions working?
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
X-Mailer: exmh version 2.0.2
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN

I know this has been discussed before, but I've been thru various net
resources and am not finding anything that works.

We are trying to restrict a specific wu-ftpd guest account so that
the user can upload files into his login dir, but cannot upload whole
directory trees, essentially that he cannot do a mkdir operation (at least
I think that's how we'd approach preventing it). He's supposed to upload
files into his login dir, instead loads something like:

       /opt/hisdir/hissubdir/hisfiles

into:
       /usr/local/ftp/guest

so that when our processes try to find his files, which they expect in:

       /usr/local/ftp/guest/hisguestdir/

they aren't there. We've made our best effort with upload, currently using:

upload /usr/local/ftp/guest   /jrtest   yes   jrtest  misc   0640    nodirs

but this isn't doing it. Can someone tell me what I might be doing wrong?

TIA.

--
Judith Reed
[email protected]
(315) 453-2912 x335



From [email protected]  Fri Jul  2 08:57:02 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id IAA21593
       for <[email protected]>; Fri, 2 Jul 1999 08:57:01 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id IAA18672;
       Fri, 2 Jul 1999 08:57:09 -0500 (CDT)
Received: from mail.vr.net ([email protected] [205.133.13.8])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id IAA11152
       for <[email protected]>; Fri, 2 Jul 1999 08:55:46 -0500 (CDT)
Received: (from lundberg@localhost)
       by mail.vr.net (8.9.3/8.9.3) id JAA06959;
       Fri, 2 Jul 1999 09:55:43 -0400
Message-Id: <[email protected]>
Date: Fri, 2 Jul 1999 09:55:43 -0400
Reply-To: Gregory A Lundberg <[email protected]>
Sender: [email protected]
From: Gregory A Lundberg <[email protected]>
To: [email protected]
Cc: [email protected]
Subject: Re: getting upload restrictions working?
In-Reply-To: <[email protected]>; from [email protected] on Fri, Jul 02, 1999 at 09:21:53AM -0400
References: <[email protected]>
Mime-Version: 1.0
Content-Type: multipart/signed; boundary=S1BNGpv0yoYahz37; micalg=pgp-md5;
       protocol="application/pgp-signature"
X-Mailer: Mutt 0.95.6i
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN


--S1BNGpv0yoYahz37
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable

On Fri, Jul 02, 1999 at 09:21:53AM -0400, [email protected] wro=
te:

> We are trying to restrict a specific wu-ftpd guest account so that the
> user can upload files into his login dir, but cannot upload whole
> directory trees, essentially that he cannot do a mkdir operation (at
> least I think that's how we'd approach preventing it). He's supposed to
> upload files into his login dir, instead loads something like:

Read the upload.configuration.HOWTO at ftp.wu-ftpd.org or in the 2.5.0
distribution.  If the user's a real putz you might also make him a
'restricted-uid' user .. lock him into his home directory.

The location of the latest version of wu-ftpd can be found in the=20
directory
=20
     ftp://ftp.wu-ftpd.org/pub/wu-ftpd/
=20
wu-ftpd Resource Center:  http://www.landfield.com/wu-ftpd/
wu-ftpd FAQ:              http://www.cetis.hvu.nl/~koos/wu-ftpd-faq.html
wu-ftpd list archive:     http://www.landfield.com/wu-ftpd/mail-archive/

--=20

Gregory A Lundberg              WU-FTPD Development Group
1441 Elmdale Drive              [email protected]
Kettering, OH 45409-1615 USA    1-800-809-2195

--S1BNGpv0yoYahz37
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: 2.6.2

iQB1AwUBN3zE3Q2nXFkJc83RAQHmqwL8DAzNG/8Bs/02it9OVWOuyz03QRh/hQCj
muS+DQZm1skjgNww8cp4fRoFJ4D9mGzpcHPHRO3FuaYVTgWKsTveFU/9LyalymaG
8Pe6x2MN1WWt51796yVSOVWvuviUNMoW
=66x4
-----END PGP SIGNATURE-----

--S1BNGpv0yoYahz37--

From [email protected]  Fri Jul  2 08:59:18 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id IAA21611
       for <[email protected]>; Fri, 2 Jul 1999 08:59:17 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id IAA00470;
       Fri, 2 Jul 1999 08:58:10 -0500 (CDT)
Received: from mail.vr.net ([email protected] [205.133.13.8])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id IAA02329
       for <[email protected]>; Fri, 2 Jul 1999 08:56:37 -0500 (CDT)
Received: (from lundberg@localhost)
       by mail.vr.net (8.9.3/8.9.3) id JAA06920;
       Fri, 2 Jul 1999 09:53:11 -0400
Message-Id: <[email protected]>
Date: Fri, 2 Jul 1999 09:53:11 -0400
Reply-To: Gregory A Lundberg <[email protected]>
Sender: [email protected]
From: Gregory A Lundberg <[email protected]>
To: Neil Calton <[email protected]>
Cc: [email protected]
Subject: Re: Unable to see files via a web browser
In-Reply-To: <v04020a02b3a25cda33ae@[130.246.73.193]>; from Neil Calton on Fri, Jul 02, 1999 at 02:21:19PM +0100
References: <v04020a02b3a25cda33ae@[130.246.73.193]>
Mime-Version: 1.0
Content-Type: multipart/signed; boundary="61jdw2sOBCFtR2d/"; micalg=pgp-md5;
       protocol="application/pgp-signature"
X-Mailer: Mutt 0.95.6i
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN


--61jdw2sOBCFtR2d/
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable

On Fri, Jul 02, 1999 at 02:21:19PM +0100, Neil Calton wrote:

> However, when trying to use FTP from a web browser then none of the files
> are visible. The README file I have put in the ~/ftp/pub directory is
> displayed but the user cannot see any files.

Run through the FAQ section on 'ls is not working' you're missing a file,
library or device.  Do the chroot-command test shown in the FAQ.

The location of the latest version of wu-ftpd can be found in the=20
directory
=20
     ftp://ftp.wu-ftpd.org/pub/wu-ftpd/
=20
wu-ftpd Resource Center:  http://www.landfield.com/wu-ftpd/
wu-ftpd FAQ:              http://www.cetis.hvu.nl/~koos/wu-ftpd-faq.html
wu-ftpd list archive:     http://www.landfield.com/wu-ftpd/mail-archive/

--=20

Gregory A Lundberg              WU-FTPD Development Group
1441 Elmdale Drive              [email protected]
Kettering, OH 45409-1615 USA    1-800-809-2195

--61jdw2sOBCFtR2d/
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: 2.6.2

iQB1AwUBN3zERQ2nXFkJc83RAQHAOgL+PIlDA4iKQSONviP09lk/QP3F2Tu7qL8g
Ml+s0W1c1mRT244brr/6O9j6ok/4HdOsmvtceqw89CPRZCD5ERBtQQieZ4bw11VX
X7ji3lc6MjO4HH5Y3yYIK1i685q1mqoV
=Bv8q
-----END PGP SIGNATURE-----

--61jdw2sOBCFtR2d/--

From [email protected]  Mon Jul  5 08:40:39 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id IAA23783
       for <[email protected]>; Mon, 5 Jul 1999 08:40:38 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id IAA01602;
       Mon, 5 Jul 1999 08:39:19 -0500 (CDT)
Received: from mgate2.uni-hannover.de ([email protected] [130.75.2.5])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id IAA14456
       for <[email protected]>; Mon, 5 Jul 1999 08:31:43 -0500 (CDT)
Received: from sun10.ipi.uni-hannover.de by mgate2.uni-hannover.de
         with LocalSMTP (PP) with ESMTP; Mon, 5 Jul 1999 15:31:10 +0200
Received: (from bolte@localhost) by sun10.ipi.uni-hannover.de (8.8.8/8.8.8)
         id PAA27543 for [email protected];
         Mon, 5 Jul 1999 15:30:57 +0200 (MET DST)
Message-Id: <[email protected]>
Date: Mon, 5 Jul 1999 15:30:57 +0200 (MET DST)
Reply-To: [email protected]
Sender: [email protected]
From: Uwe Bolte <[email protected]>
To: [email protected]
Subject: Upload: Permission denied on server
X-Sun-Charset: US-ASCII
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN

Hello,

thank you all for your help, now the ftp server is running.

But now I have a problem with uploading files. I read the
upload.configuration.HOWTO from Gregory A Lundberg and I
think I did all correct. But always when I try to upload
a file as anonymous user to incoming I get an error:

bolte 312: ftp s8
Connected to ipisun8.
220 FTP server ready.
Name (s8:bolte): anonymous
331 Guest login ok, send your complete e-mail address as password.
Password:
230 Guest login ok, access restrictions apply.
ftp> cd incoming
250 CWD command successful.
ftp> put test
200 PORT command successful.
553 test: Permission denied on server. (Upload)

The entrys in ftpaccess are:
---------------------------------------------------
..
class   local   real,guest,anonymous *.domain 0.0.0.0
class   remote  real,guest,anonymous *
class anonftp anonymous *
..

# specify the upload directory information
upload  /export/ftp  *             no
upload  /export/ftp  /incoming yes  ftpadmin ftpadmin 0440 nodirs
upload  /export/ftp  /bin          no
upload  /export/ftp  /dev          no
upload  /export/ftp  /etc          no

# directory aliases...  [note, the ":" is not required]
alias   inc:    /incoming
...
---------------------------------------------------
Thank you for your help,

Uwe     [email protected]

From [email protected]  Wed Jul  7 07:58:01 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id HAA29414
       for <[email protected]>; Wed, 7 Jul 1999 07:58:00 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id HAA04456;
       Wed, 7 Jul 1999 07:55:25 -0500 (CDT)
Received: from zam107.zam.kfa-juelich.de (zam107.zam.kfa-juelich.de [134.94.169.64])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id JAA25529
       for <[email protected]>; Tue, 6 Jul 1999 09:36:37 -0500 (CDT)
Received: (from zdv045@localhost) by zam107.zam.kfa-juelich.de (AIX4.3/UCB 8.8.8/8.8.8) id QAA37954 for [email protected]; Tue, 6 Jul 1999 16:35:50 +0200
Message-Id: <[email protected]>
Date: Tue, 6 Jul 1999 16:35:47 +0000
Reply-To: [email protected]
Sender: [email protected]
From: [email protected]
To: [email protected]
Subject: wu-ftp tools don't work
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
X-Mailer: Z-Mail (4.0.1 13Jan97)
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN

Hello,

now wu-ftp 2.5.0 is configured and works, I tried to use the tools.
But

ftpwho and ftpcount display nothing allthough there is a loggedin user:
 [email protected]: ./ftpwho
 [email protected]: ./ftpcount
 [email protected]: ps -ef | grep ftpd | grep -v grep
 ftp 33450  6708   0 15:53:49      -  0:00 ftpd: zam107.zam.kfa-juelich.de: \
                                                         anonymous/u1@: IDLE
ftpshut doesn't find the file allthough there is a record in ftpaccess:
 [email protected]: ./ftpshut 1 1 +2 FTP Ende
 No shutdown file defined in ftpaccess file.
and ftpaccess has a record:
 shutdown /etc/ftp_shutdown.msg

Whats going wrong with the tools? They compiled without error on AIX 4.3.2.

Greetings

--
Mit freundlichen Gruessen
Ulrike Schmidt

+----------------------------------------------------------------------+
| Ulrike Schmidt                                                       |
| Zentralinstitut fuer Angewandte Mathematik                           |
| Forschungszentrum Juelich GmbH                                       |
| D-52425 Juelich                                                      |
|                                           Phone: +49 02461 61-6577   |
| Email: [email protected]            Fax:   +49 02461 61-6656   |
+----------------------------------------------------------------------+

From [email protected]  Wed Jul  7 08:06:22 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id IAA29560
       for <[email protected]>; Wed, 7 Jul 1999 08:06:21 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id IAA11026;
       Wed, 7 Jul 1999 08:04:05 -0500 (CDT)
Received: from vannozzi.iat.cnr.it (dns.pi.cnr.it [146.48.65.2])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id NAA01641
       for <[email protected]>; Tue, 6 Jul 1999 13:51:51 -0500 (CDT)
Received: (from armanino@localhost)
       by vannozzi.iat.cnr.it (8.8.8/8.8.8) id UAA19429
       for [email protected]; Tue, 6 Jul 1999 20:57:57 +0200 (MET DST)
Message-Id: <[email protected]>
Date: Tue, 6 Jul 1999 20:57:57 +0200 (MET DST)
Reply-To: [email protected]
Sender: [email protected]
From: Giovanni Armanino <[email protected]>
To: [email protected]
Subject: logging problem
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
X-Mailer: ELM [version 2.4 PL25]
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN


Hi all,

reading my archive of this list I found the following
about logging with 2.5.0:

Quoting from 'Gregory A Lundberg' message:
> Date: Wed, 26 May 1999 12:03:15 -0400 (EDT)
> From: Gregory A Lundberg <[email protected]>
> Subject: Re: Logging
>
> On Wed, 26 May 1999, ryanm wrote:
>
> > Does anyone here know how I can define wu_ftpd to log everything to
> > /var/adm/xferlog?? Presently I have this in my /etc/ftpaccess
> >
> > log commands real
> > log transfers anonymous,real inbound,outbound
> >
> > But I want logins and other info logged also. I would like everything
> > logged to /var/adm/xferlog. Also sometimes I get delete requests sent
> > to /var/adm/messages and I cannot figure out why.
>
> you can't get there from here.  but you can go another way.
>
> the daemon does not have any feature to record anything in the xferlog
> except actual file transfers.
>
> but what you can do is tell the daemon (version 2.5.0) to log the
> transfers to the system log.
>
>   log syslog
>
> or to both the syslog and xferlog
>
>   log syslog+xferlog
>

mmm ok, it works as expected, I mean everythings in syslog defined file
and transfers in xferlog ...
but connection to the ftpd daemon are not logged anywhere ...
I mean something similar to the hp-ux (oh yes, this is the platform
where I'm trying to run the 2.5.0 daemon) bundled daemon who logs
as following ...

Jul  6 19:29:04 server ftpd[13285]: FTP LOGIN FROM PC-xxxx.my-domain.it, armanino

On my system wu-ftpd is logging without remote site info in syslog
Jul  6 19:35:51 server ftpd[14434]: USER armanino

my ftpaccess logging part looks like

log syslog+xferlog
log security anonymous,guest,real
log commands anonymous,guest,real
log transfers anonymous,guest,real inbound,outbound


is this a misconfiguration of my daemon, an hp-ux porting problem, a bug or
what?

Moreover, on another of my box with linux everything looks ok ...
Jul  6 19:23:20 linux-box ftpd[490]: ANONYMOUS FTP LOGIN FROM PC-xxxx.my-domain.it [xxx.xxx.xxx.xxx], giovanni@

Any help will be very appreciated.

regards,
       Giovanni

--
 ----------                                                    --------------
  Giovanni Armanino                    E-mail: [email protected]
  C.N.R.                               Phone:  +39 50 593 299
  Istituto Applicazioni Telematiche    Fax:    +39 50 904052
  via S. Maria, 36                     Telex:  500371 I CNUCE
  56126 PISA  Italy
 ----------                                                    --------------


From [email protected]  Wed Jul  7 08:07:44 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id IAA29600
       for <[email protected]>; Wed, 7 Jul 1999 08:07:43 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id IAA01532;
       Wed, 7 Jul 1999 08:00:33 -0500 (CDT)
Received: from mgate2.uni-hannover.de ([email protected] [130.75.2.5])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id JAA11300
       for <[email protected]>; Tue, 6 Jul 1999 09:52:33 -0500 (CDT)
Received: from sun10.ipi.uni-hannover.de by mgate2.uni-hannover.de
         with LocalSMTP (PP) with ESMTP; Tue, 6 Jul 1999 16:51:42 +0200
Received: (from bolte@localhost) by sun10.ipi.uni-hannover.de (8.8.8/8.8.8)
         id QAA29551 for [email protected];
         Tue, 6 Jul 1999 16:51:28 +0200 (MET DST)
Message-Id: <[email protected]>
Date: Tue, 6 Jul 1999 16:51:28 +0200 (MET DST)
Reply-To: [email protected]
Sender: [email protected]
From: Uwe Bolte <[email protected]>
To: [email protected]
Subject: Upload: Permission denied on server (again)
X-Sun-Charset: US-ASCII
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN


Hello,

we had problems with our network, so I will send my
question again.

With my new ftp sever I get the following message:

bolte 316: ftp s8
Connected to ipisun8.
220 ipisun8 FTP server (Version wu-2.5.0(1) Tue May 25 12:05:44 PDT 1999) ready.
Name (s8:bolte): anonymous
331 Guest login ok, send your complete e-mail address as password.
Password:
230 Guest login ok, access restrictions apply.
ftp> cd incoming
250 CWD command successful.
ftp> put test
200 PORT command successful.
553 test: Permission denied on server. (Upload)


I read the upload.configuration.HOWTO from Gregory A Lundberg and I
think I did all correct.

The entrys in ftpaccess are:
---------------------------------------------------
..
class anonftp anonymous *
..
# specify the upload directory information
upload  /export/ftp  *             no
upload  /export/ftp  /incoming yes  ftpadmin ftpadmin 0440 dirs
upload  /export/ftp  /bin          no
upload  /export/ftp  /dev          no
upload  /export/ftp  /etc          no
..
---------------------------------------------------

Sorry for this inconvenience,

Uwe             [email protected]

From [email protected]  Wed Jul  7 08:22:10 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id IAA29909
       for <[email protected]>; Wed, 7 Jul 1999 08:22:09 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id IAA26788;
       Wed, 7 Jul 1999 08:20:59 -0500 (CDT)
Received: from mail.vr.net ([email protected] [205.133.13.8])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id IAA03318
       for <[email protected]>; Wed, 7 Jul 1999 08:17:21 -0500 (CDT)
Received: (from lundberg@localhost)
       by mail.vr.net (8.9.3/8.9.3) id JAA28024;
       Wed, 7 Jul 1999 09:16:16 -0400
Message-Id: <[email protected]>
Date: Wed, 7 Jul 1999 09:16:15 -0400
Reply-To: Gregory A Lundberg <[email protected]>
Sender: [email protected]
From: Gregory A Lundberg <[email protected]>
To: [email protected]
Cc: WU-FTPD Discussion List <[email protected]>
Subject: Re: wu-ftp tools don't work
In-Reply-To: <[email protected]>; from [email protected] on Tue, Jul 06, 1999 at 04:35:47PM +0000
References: <[email protected]>
Mime-Version: 1.0
Content-Type: multipart/signed; boundary=YZ5djTAD1cGYuMQK; micalg=pgp-md5;
       protocol="application/pgp-signature"
X-Mailer: Mutt 0.95.6i
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN


--YZ5djTAD1cGYuMQK
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable

On Tue, Jul 06, 1999 at 04:35:47PM +0000, [email protected] wrote:

> ftpwho and ftpcount display nothing allthough there is a loggedin user:
>   [email protected]: ./ftpwho
>   [email protected]: ./ftpcount
>   [email protected]: ps -ef | grep ftpd | grep -v grep
>   ftp 33450  6708   0 15:53:49      -  0:00 ftpd: zam107.zam.kfa-juelich.=
de: \
>                                                           anonymous/u1@: =
IDLE
> ftpshut doesn't find the file allthough there is a record in ftpaccess:
>   [email protected]: ./ftpshut 1 1 +2 FTP Ende
>   No shutdown file defined in ftpaccess file.
> and ftpaccess has a record:
>   shutdown /etc/ftp_shutdown.msg
>=20
> Whats going wrong with the tools? They compiled without error on AIX 4.3.=
2.

Don't know but I'd guess the version of the tool does not match the version
of the daemon, so they're looking at the wrong ftpaccess file (at least
ftpshut is).  I'd also take a look at the compile, make sure it was using
the right compiler, and options.

--=20

Gregory A Lundberg              WU-FTPD Development Group
1441 Elmdale Drive              [email protected]
Kettering, OH 45409-1615 USA    1-800-809-2195

--YZ5djTAD1cGYuMQK
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: 2.6.2

iQB1AwUBN4NTHA2nXFkJc83RAQGcywL/aWsP5XUSjOJdGxxNF7g8Mc1N4xnb5HHb
d7C0fj/4UMv5N98kP4U22po9NhFQPuJZQad4Jt40nRPME9mXRHRSBQsjcWEmrSAi
hTIdaZjnFMK8/xouzaXShRGgw99lwlJ0
=gkC+
-----END PGP SIGNATURE-----

--YZ5djTAD1cGYuMQK--

From [email protected]  Wed Jul  7 08:24:05 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id IAA29963
       for <[email protected]>; Wed, 7 Jul 1999 08:24:04 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id IAA18854;
       Wed, 7 Jul 1999 08:23:10 -0500 (CDT)
Received: from mail.vr.net ([email protected] [205.133.13.8])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id IAA31183
       for <[email protected]>; Wed, 7 Jul 1999 08:20:14 -0500 (CDT)
Received: (from lundberg@localhost)
       by mail.vr.net (8.9.3/8.9.3) id JAA28050;
       Wed, 7 Jul 1999 09:20:04 -0400
Message-Id: <[email protected]>
Date: Wed, 7 Jul 1999 09:20:04 -0400
Reply-To: Gregory A Lundberg <[email protected]>
Sender: [email protected]
From: Gregory A Lundberg <[email protected]>
To: Giovanni Armanino <[email protected]>
Cc: WU-FTPD Discussion List <[email protected]>
Subject: Re: logging problem
In-Reply-To: <[email protected]>; from Giovanni Armanino on Tue, Jul 06, 1999 at 08:57:57PM +0200
References: <[email protected]>
Mime-Version: 1.0
Content-Type: multipart/signed; boundary=O5XBE6gyVG5Rl6Rj; micalg=pgp-md5;
       protocol="application/pgp-signature"
X-Mailer: Mutt 0.95.6i
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN


--O5XBE6gyVG5Rl6Rj
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable

On Tue, Jul 06, 1999 at 08:57:57PM +0200, Giovanni Armanino wrote:

> mmm ok, it works as expected, I mean everythings in syslog defined file
> and transfers in xferlog ...  but connection to the ftpd daemon are not
> logged anywhere ...  I mean something similar to the hp-ux (oh yes, this
> is the platform where I'm trying to run the 2.5.0 daemon) bundled daemon
> who logs as following ...
>=20
> Jul  6 19:29:04 server ftpd[13285]: FTP LOGIN FROM PC-xxxx.my-domain.it, =
armanino
>=20
> On my system wu-ftpd is logging without remote site info in syslog
> Jul  6 19:35:51 server ftpd[14434]: USER armanino
>=20
> my ftpaccess logging part looks like
>=20
> log syslog+xferlog
> log security anonymous,guest,real
> log commands anonymous,guest,real
> log transfers anonymous,guest,real inbound,outbound
>=20
> is this a misconfiguration of my daemon, an hp-ux porting problem, a bug =
or
> what?

First guess: it's a misconfigured syslog daemon, or the daemon is sending
the log messages somewhere you're not expecting it to.

--=20

Gregory A Lundberg              WU-FTPD Development Group
1441 Elmdale Drive              [email protected]
Kettering, OH 45409-1615 USA    1-800-809-2195

--O5XBE6gyVG5Rl6Rj
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: 2.6.2

iQB1AwUBN4NUAA2nXFkJc83RAQEHtwL/VS4/IYfEEIgCowMze8Q1vobWbB8jCvHT
GXU8GTvs2oyL8WkF8MVy6Lmwgy3L6pb5evRMMV56sbGt7nS8G5U623IkIC9naRsi
uiru/3DjpH6K2+F1gcFh62cS+wMZ1/QU
=tlBc
-----END PGP SIGNATURE-----

--O5XBE6gyVG5Rl6Rj--

From [email protected]  Wed Jul  7 09:40:17 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id JAA01772
       for <[email protected]>; Wed, 7 Jul 1999 09:40:17 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id HAA21383;
       Wed, 7 Jul 1999 07:44:20 -0500 (CDT)
Received: from kafka.fusionmediagroup.com ([email protected] [139.142.238.3])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id SAA09651
       for <[email protected]>; Mon, 5 Jul 1999 18:09:53 -0500 (CDT)
Received: from fusionmediagroup.com (IDENT:rob@localhost [127.0.0.1])
       by kafka.fusionmediagroup.com (8.9.3/8.9.3) with ESMTP id RAA13467
       for <[email protected]>; Mon, 5 Jul 1999 17:18:55 -0600
Message-Id: <[email protected]>
Date: Mon, 05 Jul 1999 17:18:55 -0600
Reply-To: [email protected]
Sender: [email protected]
From: Robert Goodwin <[email protected]>
To: "Wu-Ftpd (E-mail)" <[email protected]>
Subject: anonymous create directories?
References: <[email protected]>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
X-Sender: [email protected]
X-Mailer: Mozilla 4.61 [en] (X11; I; Linux 2.2.5-15 i686)
X-Accept-Language: en
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN


Hi there.

I recently upgraded to wu-ftpd 2.5.0 and around the same time someone
that uses the anonymous account complained that he couldn't create
directories or upload to the upload directory.  (permission denied)

I don't know if the 2 events are related but i don't recall changing
anything...

these are permission in /home/ftp :
drwxrwxrwx   6 ftp      ftp          1024 Jul  2 10:24 upload

it seems everyone should be able to write to this directory so it must
be something in an ftpd config file right?

How do I fix this?

-Rob

From [email protected]  Wed Jul  7 10:10:44 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id KAA02474
       for <[email protected]>; Wed, 7 Jul 1999 10:10:43 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id KAA30628;
       Wed, 7 Jul 1999 10:10:50 -0500 (CDT)
Received: from mail.vr.net ([email protected] [205.133.13.8])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id KAA31312
       for <[email protected]>; Wed, 7 Jul 1999 10:07:49 -0500 (CDT)
Received: (from lundberg@localhost)
       by mail.vr.net (8.9.3/8.9.3) id LAA29299;
       Wed, 7 Jul 1999 11:07:33 -0400
Message-Id: <[email protected]>
Date: Wed, 7 Jul 1999 11:07:32 -0400
Reply-To: Gregory A Lundberg <[email protected]>
Sender: [email protected]
From: Gregory A Lundberg <[email protected]>
To: Robert Goodwin <[email protected]>
Cc: WU-FTPD Discussion List <[email protected]>
Subject: Re: anonymous create directories?
In-Reply-To: <[email protected]>; from Robert Goodwin on Mon, Jul 05, 1999 at 05:18:55PM -0600
References: <[email protected]> <[email protected]>
Mime-Version: 1.0
Content-Type: multipart/signed; boundary=h31gzZEtNLTqOjlF; micalg=pgp-md5;
       protocol="application/pgp-signature"
X-Mailer: Mutt 0.95.6i
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN


--h31gzZEtNLTqOjlF
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable

On Mon, Jul 05, 1999 at 05:18:55PM -0600, Robert Goodwin wrote:

> I recently upgraded to wu-ftpd 2.5.0 and around the same time someone
> that uses the anonymous account complained that he couldn't create
> directories or upload to the upload directory.  (permission denied)=20
>=20
> I don't know if the 2 events are related but i don't recall changing
> anything...
>=20
> these are permission in /home/ftp :
> drwxrwxrwx   6 ftp      ftp          1024 Jul  2 10:24 upload
>=20
> it seems everyone should be able to write to this directory so it must be
> something in an ftpd config file right?
>=20
> How do I fix this?

Your site is an example of the reason 2.5.0 is more paranoid than ealier
versions.  I s'pose a better error message could be emitted.  Something
along the lines of "Your FTP administrator as attempted to shoot himself in
the foot. (permission denied)" might help the users understand why it's not
working.

The server is preventing uploads to your anonymous area because you never
configured them correctly.

Read the upload.configuration.HOWTO.  It came with your source kit and is
available online at

 ftp://ftp.wu-ftpd.org/pub/wu-ftpd/upload.configuration.HOWTO

--=20

Gregory A Lundberg              WU-FTPD Development Group
1441 Elmdale Drive              [email protected]
Kettering, OH 45409-1615 USA    1-800-809-2195

--h31gzZEtNLTqOjlF
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: 2.6.2

iQB1AwUBN4NtMQ2nXFkJc83RAQHUHQL+JqfMI4INVLm4BwdYPS3C5hH3ee/izotp
1I1dyat425AwoyKUjc/H0sOZUB+oWW6opfDQ1+6dGrRwrY91yQRFGI6oYh/w98hp
2CHOm6LxazPGbcBEbG4M/BpGeDZxuMSv
=IucB
-----END PGP SIGNATURE-----

--h31gzZEtNLTqOjlF--

From [email protected]  Wed Jul  7 10:45:21 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id KAA03058
       for <[email protected]>; Wed, 7 Jul 1999 10:45:20 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id KAA02819;
       Wed, 7 Jul 1999 10:43:41 -0500 (CDT)
Received: from orr.pwgsc.gc.ca (orr.pwgsc.gc.ca [198.103.167.14])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id KAA09319
       for <[email protected]>; Wed, 7 Jul 1999 10:41:23 -0500 (CDT)
Received:       id LAA21733; Wed, 7 Jul 1999 11:34:42 -0400
Received: by gateway ???
Received: by gateway id LAA03262
       for <[email protected]>; Wed, 7 Jul 1999 11:22:10 -0400 (EDT)
Message-Id: <[email protected]>
Date: Wed, 07 Jul 1999 11:37:33 -0700
Reply-To: [email protected]
Sender: [email protected]
From: Rocke Robertson <[email protected]>
To: wuftpd <[email protected]>
Subject: -DVIRTUAL compile question.
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="------------A44FF52DEF7238E999A6ABA2"
X-Mailer: Mozilla 4.5 [en] (WinNT; U)
X-Accept-Language: en
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN

This is a multi-part message in MIME format.
--------------A44FF52DEF7238E999A6ABA2
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit

I am finally getting around to building/installing 2.5.0 on our Solaris
2.6 systems.  The VIRTUAL.FTP.SUPPORT file says to add a -DVIRTUAL to
the makefile, just like we did in the BETAXX releases. It used to work
nicely and build cleanely. But in 2.5.0 I get these error messages, but
it does build the binaries. Is this ok ?

Making ftpd.
gcc -g -I.. -I../support -L../support -DVIRTUAL  -c  ftpd.c
In file included from ftpd.c:42:
config.h:48: warning: `VIRTUAL' redefined
*Initialization*:1: warning: this is the location of the previous
definition
yacc  ftpcmd.y
mv y.tab.c ftpcmd.c
gcc -g -I.. -I../support -L../support -DVIRTUAL  -c  ftpcmd.c
In file included from ftpcmd.y:47:
config.h:48: warning: `VIRTUAL' redefined
*Initialization*:1: warning: this is the location of the previous
definition
gcc -g -I.. -I../support -L../support -DVIRTUAL  -c  glob.c
In file included from glob.c:42:
config.h:48: warning: `VIRTUAL' redefined
*Initialization*:1: warning: this is the location of the previous
definition
gcc -g -I.. -I../support -L../support -DVIRTUAL  -c  logwtmp.c
In file included from logwtmp.c:37:


--
==========================================
Rocke Robertson
PWGSC-GTIS-CPS
Voice (613) 748-4604
Fax   (613) 748-4843
mailto:[email protected]
==========================================
"Did you know that if you play the Win NT 4.0 CD backwards, it plays a
satanic message!"
"Thats nothing! If you play it forwards, it installs Windows NT!!"


--------------A44FF52DEF7238E999A6ABA2
Content-Type: text/x-vcard; charset=us-ascii;
name="rocker.vcf"
Content-Transfer-Encoding: 7bit
Content-Description: Card for Rocke Robertson
Content-Disposition: attachment;
filename="rocker.vcf"

begin:vcard
n:991-2604;Rocker UNIX/NT Support
x-mozilla-html:FALSE
version:2.1
email;internet:[email protected]
x-mozilla-cpt:;0
fn:Rocker UNIX/NT Support 991-2604
end:vcard

--------------A44FF52DEF7238E999A6ABA2--


From [email protected]  Wed Jul  7 14:00:28 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id OAA06710
       for <[email protected]>; Wed, 7 Jul 1999 14:00:27 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id NAA12830;
       Wed, 7 Jul 1999 13:58:52 -0500 (CDT)
Received: from mail.vr.net ([email protected] [205.133.13.8])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id NAA12105
       for <[email protected]>; Wed, 7 Jul 1999 13:56:40 -0500 (CDT)
Received: (from lundberg@localhost)
       by mail.vr.net (8.9.3/8.9.3) id OAA31638;
       Wed, 7 Jul 1999 14:56:31 -0400
Message-Id: <[email protected]>
Date: Wed, 7 Jul 1999 14:56:31 -0400
Reply-To: Gregory A Lundberg <[email protected]>
Sender: [email protected]
From: Gregory A Lundberg <[email protected]>
To: Rocke Robertson <[email protected]>
Cc: WU-FTPD Discussion List <[email protected]>
Subject: Re: -DVIRTUAL compile question.
In-Reply-To: <[email protected]>; from Rocke Robertson on Wed, Jul 07, 1999 at 11:37:33AM -0700
References: <[email protected]>
Mime-Version: 1.0
Content-Type: multipart/signed; boundary="dTy3Mrz/UPE2dbVg"; micalg=pgp-md5;
       protocol="application/pgp-signature"
X-Mailer: Mutt 0.95.6i
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN


--dTy3Mrz/UPE2dbVg
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable

On Wed, Jul 07, 1999 at 11:37:33AM -0700, Rocke Robertson wrote:

> I am finally getting around to building/installing 2.5.0 on our Solaris
> 2.6 systems.  The VIRTUAL.FTP.SUPPORT file says to add a -DVIRTUAL to the
> makefile, just like we did in the BETAXX releases. It used to work nicely
> and build cleanely. But in 2.5.0 I get these error messages, but it does
> build the binaries. Is this ok ?

In 2.5.0, VIRTUAL is the default since all versions of Solaris support it.
Simply ignore the comments about -DVIRTUAL and build the daemon.

> config.h:48: warning: `VIRTUAL' redefined
> *Initialization*:1: warning: this is the location of the previous definit=
ion

If the only messages you get are warning such as the above, ignore them;
the daemon was built correctly.

--=20

Gregory A Lundberg              WU-FTPD Development Group
1441 Elmdale Drive              [email protected]
Kettering, OH 45409-1615 USA    1-800-809-2195

--dTy3Mrz/UPE2dbVg
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: 2.6.2

iQB1AwUBN4Oi3Q2nXFkJc83RAQGwSQL+L2C+9G81ovTK3LOw+VUqN8l8tEo8veJW
1AOEG48ZyaUnCS9VGFp8nDNKNWI+6R0Ifi6r0ELoRfXcXy7lAZzU7fEQJfGnLreo
esiOpcvZBohpek4oe6qK8yq2GMHDvMSU
=93B+
-----END PGP SIGNATURE-----

--dTy3Mrz/UPE2dbVg--

From [email protected]  Wed Jul  7 16:55:41 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id QAA10084
       for <[email protected]>; Wed, 7 Jul 1999 16:55:40 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id QAA02790;
       Wed, 7 Jul 1999 16:55:11 -0500 (CDT)
Received: from ljcqs016.cnf.com ([205.185.108.239])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id QAA01832
       for <[email protected]>; Wed, 7 Jul 1999 16:54:26 -0500 (CDT)
Received: from cnfvs008.cnf.com (localhost [127.0.0.1])
       by ljcqs016.cnf.com (8.8.7/8.8.7) with ESMTP id OAA23315
       for <[email protected]>; Wed, 7 Jul 1999 14:53:53 -0700 (PDT)
Received: by cnfvs008.cnf.com with Internet Mail Service (5.5.2448.0)
       id <N5DA62D8>; Wed, 7 Jul 1999 14:53:43 -0700
Message-Id: <[email protected]>
Date: Wed, 7 Jul 1999 14:53:42 -0700
Reply-To: [email protected]
Sender: [email protected]
From: "Peniak, Rick - MLG" <[email protected]>
To: "'[email protected]'" <[email protected]>
Subject: hpux 10.xx - wu-ftpd can't authenticate on non-trusted servers
MIME-Version: 1.0
Content-Type: text/plain
X-Mailer: Internet Mail Service (5.5.2448.0)
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN


Hi everyone,

I have a problem at work that I am trying to solve and just can't. I
compiled and installed the latest version of wu-ftpd. I edited
/etc/inetd.conf and ran 'inetd -c' to refresh all daemons. Everything seemed
ok (the banner upon invoking ftp said "Version wu-2.4(4)...") until I tried
to login. Whether I login as user or as root, it tells me that the login has
failed. Essentially, wu-ftpd is not capable of authentication using the
standard /etc/passwd. What I can tell you that is interesting is that all of
the servers where wu-ftpd is installed and working are trusted servers. The
question is, what do I do to install it on a non-trusted server? Are there
compile options that I need to figure out?

Thank you very much. Any help would be greatly appreciated.

Rick.


From [email protected]  Wed Jul  7 17:53:24 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id RAA10979
       for <[email protected]>; Wed, 7 Jul 1999 17:53:24 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id RAA00776;
       Wed, 7 Jul 1999 17:53:33 -0500 (CDT)
Received: from nuinfo.nwu.edu ([email protected] [129.105.212.72])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id RAA31950
       for <[email protected]>; Wed, 7 Jul 1999 17:49:46 -0500 (CDT)
Received: (from lunde@localhost)
       by nuinfo.nwu.edu (8.8.8/8.8.8) id RAA01723;
       Wed, 7 Jul 1999 17:49:41 -0500 (CDT)
Message-Id: <[email protected]>
Date: Wed, 07 Jul 1999 17:49:40 CDT
Reply-To: [email protected] (Albert Lunde)
Sender: [email protected]
From: [email protected] (Albert Lunde)
To: [email protected]
Cc: [email protected]
Subject: Re: hpux 10.xx - wu-ftpd can't authenticate on non-trusted servers
In-Reply-To: <[email protected]>; from "Peniak, Rick - MLG" at Jul 7, 99 2:53 pm
X-Sender: [email protected] (Albert Lunde)
X-Mailer: Elm [revision: 212.4]
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN

>
>
> Hi everyone,
>
> I have a problem at work that I am trying to solve and just can't. I
> compiled and installed the latest version of wu-ftpd. I edited
> /etc/inetd.conf and ran 'inetd -c' to refresh all daemons. Everything seemed
> ok (the banner upon invoking ftp said "Version wu-2.4(4)...") until I tried
> to login. Whether I login as user or as root, it tells me that the login has
> failed. Essentially, wu-ftpd is not capable of authentication using the
> standard /etc/passwd. What I can tell you that is interesting is that all of
> the servers where wu-ftpd is installed and working are trusted servers. The
> question is, what do I do to install it on a non-trusted server? Are there
> compile options that I need to figure out?

I've never tested wu-ftpd on an untrused HP-UX system, because we don't run
any production machines as untrusted.

But from the logic of the patches, as I've looked at them in the past,
I think you could replace the line "#define HPUX_10_TRUSTED" with
"#undef HPUX_10_TRUSTED" in src/config/config.hpx

--
   Albert Lunde                      [email protected]

From [email protected]  Wed Jul  7 23:02:36 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id XAA15378
       for <[email protected]>; Wed, 7 Jul 1999 23:02:35 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id XAA31093;
       Wed, 7 Jul 1999 23:02:51 -0500 (CDT)
Received: from wasabi.it.uq.edu.au (wasabi.it.uq.edu.au [130.102.192.56])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id WAA00235
       for <[email protected]>; Wed, 7 Jul 1999 22:58:12 -0500 (CDT)
Received: from whistle.it.uq.edu.au (whistle.it.uq.edu.au [130.102.64.15]) by wasabi.it.uq.edu.au (8.8.7/8.8.7) with ESMTP id NAA09891 for <[email protected]>; Thu, 8 Jul 1999 13:58:07 +1000 (EST)
Received: from localhost (dross@localhost)
       by whistle.it.uq.edu.au (8.9.3/8.9.3) with ESMTP id NAA14590
       for <[email protected]>; Thu, 8 Jul 1999 13:58:07 +1000 (EST)
Message-Id: <Pine.GSO.4.10.9907081354330.14289-100000@whistle>
Date: Thu, 8 Jul 1999 13:58:06 +1000 (EST)
Reply-To: [email protected]
Sender: [email protected]
From: David Ross <[email protected]>
To: WU-FTPD Discussion List <[email protected]>
Subject: Re: hpux 10.xx - wu-ftpd can't authenticate on non-trusted servers
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
X-Authentication-Warning: whistle.it.uq.edu.au: dross owned process doing -bs
X-Sender: dross@whistle
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN

> > compiled and installed the latest version of wu-ftpd. I edited
> > /etc/inetd.conf and ran 'inetd -c' to refresh all daemons. Everything seemed
> > ok (the banner upon invoking ftp said "Version wu-2.4(4)...") until I tried

But surely the latest version would have a banner of "wu-2.5..."?
Are you sure inetd is finding the right binary?

Just a thought - Dave :-)

-------------------------------------------------------------------------
Dave Ross

[email protected]
Department of Computer Science and Electrical Engineering,
The University of Queensland

[email protected]
CFMU UNIX - TSG3 - Internet Team,
Facilities Management and Bureau Services,
CITEC (in Brisbane, Queensland, Australia.)
-------------------------------------------------------------------------




From [email protected]  Thu Jul  8 09:22:27 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id JAA23822
       for <[email protected]>; Thu, 8 Jul 1999 09:22:26 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id JAA13122;
       Thu, 8 Jul 1999 09:21:22 -0500 (CDT)
Received: from cybersoft.com.sg (cybersoft.com.sg [203.127.51.130])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id JAA08320
       for <[email protected]>; Thu, 8 Jul 1999 09:13:42 -0500 (CDT)
Message-Id: <[email protected]>
Date: Thu, 8 Jul 1999 22:11:57 +0800
Reply-To: [email protected]
Sender: [email protected]
From: "Simon" <[email protected]>
To: <[email protected]>
Subject: newbie having prblem with guest user ftp
MIME-Version: 1.0
Content-Type: text/plain;
       charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN

Hi,

I have a Solaris 2.6 running wu-ftpd Version wu-2.4.2-academ[BETA-13]

I would like to setup a guest user ftp for users to upload the webpages.

I followed the GlennFleishman Guide on configuring
but couldn't seem to get it working.

Just  a recap :

In     inetd.conf
ftp     stream  tcp     nowait  root    /usr/sbin/in.ftpd       in.ftpd -al


1) create  user account with

   abcd:x:30011:5005::/export/home/httpd/htdocs/version2/./:/bin/noshell

   Add      /bin/noshell        in     /etc/shells

   Create     /bin/noshell  containing
   #!/bin/sh
   echo "You don't have login access"

It works cos' when I telnet     it promtps  "You don't have login acces"

2) under root dir

   mkdir bin dev etc usr usr/lib
   chmod  all of above to 0555

   cp /bin/ls to /export/home/httpd/htdocs/version2/bin/.

   cp /etc/passwd /etc/group     to     /export/home/httpd/htdocs/version2

   cp /lib    /export/home/httpd/htdocs/version2/usr/lib

   /export/home/httpd/htdocs/version2/dev
   mknod tcp c  <major> <minor>
   mknod zero  c <major> <minor>

3) setup /etc/ftpaccess

class local real,guest,abcd *
class remote real,guest,abcd *

guestgroup abcd

log commands real,anonymous,guest,abcd
log tranfers guest,anonymous,real,abcd inbound,outbound

delete yes abcd
overwrite yes abcd
rename yes abcd
chmod no anonymous
umask no anonymous

upload /export/home/httpd/htdocs/version2 yes root abcd


When I ftp I still get to

/export/home/httpd/htdocs/version2 which should appears as     "/"
and could still cd up.


Di d I miss any crucial steps or configure any thing wrongly ?

Thankx.

Best Rgds,

Simon


From [email protected]  Thu Jul  8 10:31:54 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id KAA25599
       for <[email protected]>; Thu, 8 Jul 1999 10:31:53 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id KAA31894;
       Thu, 8 Jul 1999 10:32:02 -0500 (CDT)
Received: from mail.vr.net ([email protected] [205.133.13.8])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id KAA03732
       for <[email protected]>; Thu, 8 Jul 1999 10:28:43 -0500 (CDT)
Received: (from lundberg@localhost)
       by mail.vr.net (8.9.3/8.9.3) id LAA09965;
       Thu, 8 Jul 1999 11:28:14 -0400
Message-Id: <[email protected]>
Date: Thu, 8 Jul 1999 11:28:13 -0400
Reply-To: Gregory A Lundberg <[email protected]>
Sender: [email protected]
From: Gregory A Lundberg <[email protected]>
To: Simon <[email protected]>
Cc: WU-FTPD Discussion List <[email protected]>
Subject: Re: newbie having prblem with guest user ftp
In-Reply-To: <[email protected]>; from Simon on Thu, Jul 08, 1999 at 10:11:57PM +0800
References: <[email protected]>
Mime-Version: 1.0
Content-Type: multipart/signed; boundary=zYM0uCDKw75PZbzx; micalg=pgp-md5;
       protocol="application/pgp-signature"
X-Mailer: Mutt 0.95.6i
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN


--zYM0uCDKw75PZbzx
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable

On Thu, Jul 08, 1999 at 10:11:57PM +0800, Simon wrote:

> I have a Solaris 2.6 running wu-ftpd Version wu-2.4.2-academ[BETA-13]

First, you need to upgrade to version 2.5.0; the version you are using is
old and has some severe security problems which are being actively
exploited to gain root access on servers.

> I would like to setup a guest user ftp for users to upload the webpages.
>=20
> I followed the GlennFleishman Guide on configuring but couldn't seem to
> get it working.

I do not know what the guide you're talking about says.  The information
you need is in the FAQ, the guest HOWTO, and the
upload.configuration.HOWTO.

The location of the latest version of wu-ftpd can be found in the=20
directory
=20
     ftp://ftp.wu-ftpd.org/pub/wu-ftpd/
=20
wu-ftpd Resource Center:  http://www.landfield.com/wu-ftpd/
wu-ftpd FAQ:              http://www.cetis.hvu.nl/~koos/wu-ftpd-faq.html
wu-ftpd list archive:     http://www.landfield.com/wu-ftpd/mail-archive/

--=20

Gregory A Lundberg              WU-FTPD Development Group
1441 Elmdale Drive              [email protected]
Kettering, OH 45409-1615 USA    1-800-809-2195

--zYM0uCDKw75PZbzx
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: 2.6.2

iQB1AwUBN4TDig2nXFkJc83RAQGGBgMAhHBWzFQE25A58shLhF5omEt0vYhy7vBr
6/X5X4obd4p/W2xXUmHONOZ0Who5p7/8TxPrffDxOoloCWhSKqbLYDYIv4IJEgZ7
fgcASpb73DYrPpMNKc8rIHe3kKlo4yT3
=KU2U
-----END PGP SIGNATURE-----

--zYM0uCDKw75PZbzx--

From [email protected]  Thu Jul  8 11:16:06 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id LAA26465
       for <[email protected]>; Thu, 8 Jul 1999 11:16:05 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id LAA29453;
       Thu, 8 Jul 1999 11:16:11 -0500 (CDT)
Received: from gw1.bfg.com (gateway.bfg.com [131.187.253.2])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id LAA14778
       for <[email protected]>; Thu, 8 Jul 1999 11:13:55 -0500 (CDT)
Received: (from uucp@localhost)
       by gw1.bfg.com (8.9.3/8.9.3) id MAA21326;
       Thu, 8 Jul 1999 12:13:46 -0400 (EDT)
Received: from ns1.bfg.com(192.73.67.20) by gw1.bfg.com via smap (V2.1)
       id sma019448; Thu, 8 Jul 99 12:12:00 -0400
Received: from localhost (keller@localhost)
       by ns1.bfg.com (8.9.3/8.9.3) with ESMTP id MAA25833;
       Thu, 8 Jul 1999 12:12:00 -0400 (EDT)
Message-Id: <[email protected]>
Date: Thu, 8 Jul 1999 12:12:00 -0400 (EDT)
Reply-To: [email protected]
Sender: [email protected]
From: Ted Keller <[email protected]>
To: Simon <[email protected]>
Cc: [email protected]
Subject: Re: newbie having prblem with guest user ftp
In-Reply-To: <[email protected]>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN

Simon,

Did you also add

abcd:*:5005:

to your /etc/group file?

ted keller


On Thu, 8 Jul 1999, Simon wrote:

> Hi,
>
> I have a Solaris 2.6 running wu-ftpd Version wu-2.4.2-academ[BETA-13]
>
> I would like to setup a guest user ftp for users to upload the webpages.
>
> I followed the GlennFleishman Guide on configuring
> but couldn't seem to get it working.
>
> Just  a recap :
>
> In     inetd.conf
> ftp     stream  tcp     nowait  root    /usr/sbin/in.ftpd       in.ftpd -al
>
>
> 1) create  user account with
>
>     abcd:x:30011:5005::/export/home/httpd/htdocs/version2/./:/bin/noshell
>
>     Add      /bin/noshell        in     /etc/shells
>
>     Create     /bin/noshell  containing
>     #!/bin/sh
>     echo "You don't have login access"
>
> It works cos' when I telnet     it promtps  "You don't have login acces"
>
> 2) under root dir
>
>     mkdir bin dev etc usr usr/lib
>     chmod  all of above to 0555
>
>     cp /bin/ls to /export/home/httpd/htdocs/version2/bin/.
>
>     cp /etc/passwd /etc/group     to     /export/home/httpd/htdocs/version2
>
>     cp /lib    /export/home/httpd/htdocs/version2/usr/lib
>
>     /export/home/httpd/htdocs/version2/dev
>     mknod tcp c  <major> <minor>
>     mknod zero  c <major> <minor>
>
> 3) setup /etc/ftpaccess
>
> class local real,guest,abcd *
> class remote real,guest,abcd *
>
> guestgroup abcd
>
> log commands real,anonymous,guest,abcd
> log tranfers guest,anonymous,real,abcd inbound,outbound
>
> delete yes abcd
> overwrite yes abcd
> rename yes abcd
> chmod no anonymous
> umask no anonymous
>
> upload /export/home/httpd/htdocs/version2 yes root abcd
>
>
> When I ftp I still get to
>
> /export/home/httpd/htdocs/version2 which should appears as     "/"
> and could still cd up.
>
>
> Di d I miss any crucial steps or configure any thing wrongly ?
>
> Thankx.
>
> Best Rgds,
>
> Simon
>


From [email protected]  Thu Jul  8 14:25:25 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id OAA29573
       for <[email protected]>; Thu, 8 Jul 1999 14:25:24 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id OAA19491;
       Thu, 8 Jul 1999 14:25:28 -0500 (CDT)
Received: from illinova.com (firewall1.illinova.com [192.189.96.253])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id OAA12450
       for <[email protected]>; Thu, 8 Jul 1999 14:21:35 -0500 (CDT)
Received: by firewall1.illinova.com id <37406>; Thu, 8 Jul 1999 14:15:43 -0500
Message-Id: <[email protected]>
Date: Thu, 8 Jul 1999 14:24:53 -0500
Reply-To: [email protected]
Sender: [email protected]
From: Dave Jones <[email protected]>
To: [email protected]
Cc: [email protected]
Subject: remove
References: <[email protected]>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
X-Mailer: Mozilla 3.04 (WinNT; I)
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN

remove

From [email protected]  Thu Jul  8 18:36:03 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id SAA03482
       for <[email protected]>; Thu, 8 Jul 1999 18:36:02 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id SAA25596;
       Thu, 8 Jul 1999 18:34:44 -0500 (CDT)
Received: from ini2.inifap.conacyt.mx ([email protected] [148.207.175.35] (may be forged))
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id SAA03061
       for <[email protected]>; Thu, 8 Jul 1999 18:28:25 -0500 (CDT)
Received: from localhost (carlos@localhost)
       by ini2.inifap.conacyt.mx (8.9.3/8.9.3) with ESMTP id SAA01274
       for <[email protected]>; Thu, 8 Jul 1999 18:28:18 -0500
Message-Id: <[email protected]>
Date: Thu, 8 Jul 1999 18:28:18 -0500 (CDT)
Reply-To: [email protected]
Sender: [email protected]
From: [email protected]
To: lista de wu-ftpd <[email protected]>
Subject: list dont work in guestusers
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN

hi list!!!

Please help, i have a great problem, i cant config fine the guest
accounts..

they log and just can see his home like a /  but they cant list with "ls"
just whit NLIST  why?
what is wrong..

thanx

Carlos Barba.



From [email protected]  Thu Jul  8 20:24:11 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id UAA04980
       for <[email protected]>; Thu, 8 Jul 1999 20:24:10 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id UAA08053;
       Thu, 8 Jul 1999 20:23:21 -0500 (CDT)
Received: from treefern.apana.org.au (treefern.apana.org.au [203.14.152.50])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id UAA10392
       for <[email protected]>; Thu, 8 Jul 1999 20:20:56 -0500 (CDT)
Received: from localhost (cdewick@localhost)
       by treefern.apana.org.au (8.9.3/8.9.3) with ESMTP id LAA16317
       for <[email protected]>; Fri, 9 Jul 1999 11:20:15 +1000 (EST)
Message-Id: <[email protected]>
Date: Fri, 9 Jul 1999 11:20:14 +1000 (EST)
Reply-To: [email protected]
Sender: [email protected]
From: Craig Dewick <[email protected]>
To: WUFTPD Discussion List <[email protected]>
Subject: unusual config problem
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN


Hi,

I'm still running the vr17 release (I'll upgrade later today), however
I've been having a small apparent problem with the config.

In the ftpaccess file I have the following lines:

passwd-check rfc822 enforce
deny-email IEuser@
deny-email IE20User@
deny-email IE30User@
deny-email IE40User@
deny-email IE50User@
deny-email mozilla@
anonymous-root /export/ftp

amongst others.

The deny-email lines work fine, but I've noticed entries in the logfile
for connection with 'netcache@' as the password which have been allowed,
and I would have assumed that a string like that wasn't rfc-822 complient.
Is it?

If it's not rfc-822 complient, why isn't the 'passwd-check rfc822 enforce'
line doing it's job? I have seen entries in the logfile for passwords
which are refused because they're not rfc-822 complient, but any that are
structured 'string@' seem to get through.

Also, can I use wildcards in the email spec for the deny-email lines? If
yes, then could I use something like

deny-email IE?0User@

instead of one line for each variation of the IE version number?

Regards,

Craig.



From [email protected]  Thu Jul  8 21:48:12 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id VAA06062
       for <[email protected]>; Thu, 8 Jul 1999 21:48:11 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id VAA11822;
       Thu, 8 Jul 1999 21:47:11 -0500 (CDT)
Received: from pentagram (CDR3-192.accesscable.net [24.138.3.192])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id VAA21660
       for <[email protected]>; Thu, 8 Jul 1999 21:44:32 -0500 (CDT)
Received: from localhost (user: 'moses', uid#500) by pentagram.nslug.ns.ca id <109096-391>; Thu, 8 Jul 1999 23:44:05 -0300
Message-Id: <[email protected]>
Date: Thu, 8 Jul 1999 23:44:05 -0300 (ADT)
Reply-To: [email protected]
Sender: [email protected]
From: Michael Smith <[email protected]>
To: Craig Dewick <[email protected]>
Cc: WUFTPD Discussion List <[email protected]>
Subject: Re: unusual config problem
In-Reply-To: <[email protected]>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
X-Sender: [email protected]
X-Sender: [email protected]
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN

On Fri, 9 Jul 1999, Craig Dewick wrote:

> passwd-check rfc822 enforce

> If it's not rfc-822 complient, why isn't the 'passwd-check rfc822 enforce'
> line doing it's job?

I think it still allows you to enter your username@, and wu-ftpd fills out
the fqdn with the reverse IP mapping of the client's host.


From [email protected]  Fri Jul  9 05:28:47 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id FAA12325
       for <[email protected]>; Fri, 9 Jul 1999 05:28:47 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id FAA32496;
       Fri, 9 Jul 1999 05:27:31 -0500 (CDT)
Received: from mail.vr.net ([email protected] [205.133.13.8])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id FAA20604
       for <[email protected]>; Fri, 9 Jul 1999 05:23:35 -0500 (CDT)
Received: (from lundberg@localhost)
       by mail.vr.net (8.9.3/8.9.3) id GAA20223;
       Fri, 9 Jul 1999 06:23:32 -0400
Message-Id: <[email protected]>
Date: Fri, 9 Jul 1999 06:23:32 -0400
Reply-To: Gregory A Lundberg <[email protected]>
Sender: [email protected]
From: Gregory A Lundberg <[email protected]>
To: [email protected]
Cc: WU-FTPD Discussion List <[email protected]>
Subject: Re: list dont work in guestusers
In-Reply-To: <[email protected]>; from [email protected] on Thu, Jul 08, 1999 at 06:28:18PM -0500
References: <[email protected]>
Mime-Version: 1.0
Content-Type: multipart/signed; boundary="u3/rZRmxL6MmkK24"; micalg=pgp-md5;
       protocol="application/pgp-signature"
X-Mailer: Mutt 0.95.6i
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN


--u3/rZRmxL6MmkK24
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable

On Thu, Jul 08, 1999 at 06:28:18PM -0500, [email protected] wro=
te:

> Please help, i have a great problem, i cant config fine the guest
> accounts.  they log and just can see his home like a /  but they cant
> list with "ls" just whit NLIST  why?  what is wrong..

Very FAQ.


The location of the latest version of wu-ftpd can be found in the=20
directory
=20
     ftp://ftp.wu-ftpd.org/pub/wu-ftpd/
=20
wu-ftpd Resource Center:  http://www.landfield.com/wu-ftpd/
wu-ftpd FAQ:              http://www.cetis.hvu.nl/~koos/wu-ftpd-faq.html
wu-ftpd list archive:     http://www.landfield.com/wu-ftpd/mail-archive/

--=20

Gregory A Lundberg              WU-FTPD Development Group
1441 Elmdale Drive              [email protected]
Kettering, OH 45409-1615 USA    1-800-809-2195

--u3/rZRmxL6MmkK24
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: 2.6.2

iQB1AwUBN4XNog2nXFkJc83RAQEMMQL/cwXtnGDE40c2ewQpmTJ+j4vKRjzs0G71
xQHfL+1bUQrqPAZKIwpfBKSA7e9+BGkzxptFVGVvmfr0XXgExtMjj9aHI/JPOZTl
134ek/JR+W36369kJS9HnZdCdh2XxaUi
=NvfA
-----END PGP SIGNATURE-----

--u3/rZRmxL6MmkK24--

From [email protected]  Fri Jul  9 05:51:14 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id FAA12668
       for <[email protected]>; Fri, 9 Jul 1999 05:51:14 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id FAA11532;
       Fri, 9 Jul 1999 05:51:38 -0500 (CDT)
Received: from mail.vr.net ([email protected] [205.133.13.8])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id FAA22237
       for <[email protected]>; Fri, 9 Jul 1999 05:47:46 -0500 (CDT)
Received: (from lundberg@localhost)
       by mail.vr.net (8.9.3/8.9.3) id GAA20403;
       Fri, 9 Jul 1999 06:45:44 -0400
Message-Id: <[email protected]>
Date: Fri, 9 Jul 1999 06:45:44 -0400
Reply-To: Gregory A Lundberg <[email protected]>
Sender: [email protected]
From: Gregory A Lundberg <[email protected]>
To: Craig Dewick <[email protected]>
Cc: WUFTPD Discussion List <[email protected]>
Subject: Re: unusual config problem
In-Reply-To: <[email protected]>; from Craig Dewick on Fri, Jul 09, 1999 at 11:20:14AM +1000
References: <[email protected]>
Mime-Version: 1.0
Content-Type: multipart/signed; boundary="kXdP64Ggrk/fb43R"; micalg=pgp-md5;
       protocol="application/pgp-signature"
X-Mailer: Mutt 0.95.6i
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN


--kXdP64Ggrk/fb43R
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable

On Fri, Jul 09, 1999 at 11:20:14AM +1000, Craig Dewick wrote:

> I'm still running the vr17 release (I'll upgrade later today), however
> I've been having a small apparent problem with the config.

:P

> In the ftpaccess file I have the following lines:
>=20
> passwd-check rfc822 enforce
> deny-email IEuser@
> deny-email IE20User@
> deny-email IE30User@
> deny-email IE40User@
> deny-email IE50User@
> deny-email mozilla@
> anonymous-root /export/ftp
>=20
> The deny-email lines work fine, but I've noticed entries in the logfile
> for connection with 'netcache@' as the password which have been allowed,
> and I would have assumed that a string like that wasn't rfc-822
> complient.  Is it?
>=20
> If it's not rfc-822 complient, why isn't the 'passwd-check rfc822
> enforce' line doing it's job? I have seen entries in the logfile for
> passwords which are refused because they're not rfc-822 complient, but
> any that are structured 'string@' seem to get through.

Legacy has it that entering username@ is good enough if you mean your email
address is username@<clienthost> .. and, once upon a time, it may have
been.  Nowadays, <clienthost> is rarely your mailhost or even has a proper
MX.  But we're stuck with the assumption.

The RFC 822 check does not (in fact, cannot) guarentee the email address
entered is valid or correct.  All it does is make a (rather lame) attempt
to be sure the email address looks even remotely like it could possibly be
a usable email address.  *blink*

> Also, can I use wildcards in the email spec for the deny-email lines? If
> yes, then could I use something like
>=20
> deny-email IE?0User@
>=20
> instead of one line for each variation of the IE version number?

You can use a full regular expression:

deny-email (IE([2-5]0)?user)|(mozilla)@

--=20

Gregory A Lundberg              WU-FTPD Development Group
1441 Elmdale Drive              [email protected]
Kettering, OH 45409-1615 USA    1-800-809-2195

--kXdP64Ggrk/fb43R
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: 2.6.2

iQB1AwUBN4XS1g2nXFkJc83RAQGq5AMAytaLEflz5iPqvrRy1pa7FdQQsjs0TCCc
4eZXSQzwLxzOW0LrSnqFZYVPwkSp/SgTP3/rj3rmSoasan6swfvj3B7RlIt9JaBV
R1JvgSvgU4ml9ai68WhE76klgdh1mLmJ
=J4R0
-----END PGP SIGNATURE-----

--kXdP64Ggrk/fb43R--

From [email protected]  Fri Jul  9 05:54:36 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id FAA12716
       for <[email protected]>; Fri, 9 Jul 1999 05:54:36 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id FAA06334;
       Fri, 9 Jul 1999 05:53:45 -0500 (CDT)
Received: from plmail.parceline.co.uk ([195.224.86.68])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id FAA30396
       for <[email protected]>; Fri, 9 Jul 1999 05:48:33 -0500 (CDT)
Received: from [192.9.200.85] by plmail.parceline.co.uk
(Sun Internet Mail Server sims.3.5.1998.08.08.00.06)
with ESMTP id <[email protected]> for
[email protected]; Fri,  9 Jul 1999 11:44:35 +0100 (BST)
Message-Id: <[email protected]>
Date: Fri, 09 Jul 1999 11:48:08 +0100
Reply-To: [email protected]
Sender: [email protected]
From: Mukund Rajyaguru <[email protected]>
To: [email protected]
Subject: More information needed with guest account setup asnd workings.
MIME-version: 1.0
Content-type: text/plain; charset="US-ASCII"
Content-transfer-encoding: 7bit
X-Mailer: Microsoft Outlook Express for Macintosh - 4.01 (295)
X-Priority: 3
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN

please can any one give me a site or more information on guest setup on
WU-ftp. I need more information in who can execute site exec commands. At
present for a guest account this cannot be done the error message I get is

?Invalid command

thankyou

Regards
Mukund Rajyaguru ( Unix Support Techincian)


E-Mail: [email protected]


From [email protected]  Fri Jul  9 05:57:49 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id FAA12781
       for <[email protected]>; Fri, 9 Jul 1999 05:57:48 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id FAA23331;
       Fri, 9 Jul 1999 05:58:13 -0500 (CDT)
Received: from vannozzi.iat.cnr.it (dns.pi.cnr.it [146.48.65.2])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id FAA02535
       for <[email protected]>; Fri, 9 Jul 1999 05:55:11 -0500 (CDT)
Received: (from armanino@localhost)
       by vannozzi.iat.cnr.it (8.8.8/8.8.8) id NAA23973
       for [email protected]; Fri, 9 Jul 1999 13:01:00 +0200 (MET DST)
Message-Id: <[email protected]>
Date: Fri, 9 Jul 1999 13:01:00 +0200 (MET DST)
Reply-To: [email protected]
Sender: [email protected]
From: Giovanni Armanino <[email protected]>
To: [email protected]
Subject: Re: logging problem
In-Reply-To: <[email protected]> from "Gregory A Lundberg" at Jul 7, 99 09:20:04 am
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
X-Mailer: ELM [version 2.4 PL25]
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN

Quoting from 'Gregory A Lundberg' message:
>
> > On my system wu-ftpd is logging without remote site info in syslog
> > Jul  6 19:35:51 server ftpd[14434]: USER armanino
> >
> > my ftpaccess logging part looks like
> >
> > log syslog+xferlog
> > log security anonymous,guest,real
> > log commands anonymous,guest,real
> > log transfers anonymous,guest,real inbound,outbound
> >
> > is this a misconfiguration of my daemon, an hp-ux porting problem, a bug =
> or
> > what?
>
> First guess: it's a misconfigured syslog daemon, or the daemon is sending
> the log messages somewhere you're not expecting it to.

OPS, It was a stupid problem :( ... and now it has been solved
I just forgot the "-l" option in startup parameters :( ....

Ok, but now I have another problem, still tied with logging or similar.

As I told before, I'm running 2.5.0 daemon on hpux10.20.
I compiled with all defaults using the hp ansi c compiler.
the problem now is that the ftpd, even writing in the wtmp,
doesn't write all used info:

sample of 'last -R' output

...
armanino ftp                           Thu Jul  8 16:02 - 16:03  (00:00)
guest    ftp                           Thu Jul  8 15:58 - 16:02  (00:03)
ftp      ftp                           Thu Jul  8 15:57 - 15:58  (00:00)
armanino ttyp3        PC-xxxxxx.xxxxxx Thu Jul  8 15:28 - 15:38  (00:10)
...

as you can see the remote host name is missed.

Note that the ftpd bundled with hpux10.20 reports correctly the user's
host name for each ftp session recorded in the wtmp. So, I think
it should not just be a 'last command' problem as for old Solaris ...

I tried also to add '-w', even if it's the default, to startup parameters,
but nothing changes.

Has anyone any suggestion to solve the wtmp problem?

thanks in advance and regards,

       giovanni

--
 ----------                                                    --------------
  Giovanni Armanino                    E-mail: [email protected]
  C.N.R.                               Phone:  +39 50 593 299
  Istituto Applicazioni Telematiche    Fax:    +39 50 904052
  via S. Maria, 36                     Telex:  500371 I CNUCE
  56126 PISA  Italy
 ----------                                                    --------------


From [email protected]  Fri Jul  9 07:16:41 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id HAA13802
       for <[email protected]>; Fri, 9 Jul 1999 07:16:40 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id HAA10448;
       Fri, 9 Jul 1999 07:15:50 -0500 (CDT)
Received: from mail.vr.net ([email protected] [205.133.13.8])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id HAA26607
       for <[email protected]>; Fri, 9 Jul 1999 07:09:58 -0500 (CDT)
Received: (from lundberg@localhost)
       by mail.vr.net (8.9.3/8.9.3) id IAA20966;
       Fri, 9 Jul 1999 08:09:48 -0400
Message-Id: <[email protected]>
Date: Fri, 9 Jul 1999 08:09:48 -0400
Reply-To: Gregory A Lundberg <[email protected]>
Sender: [email protected]
From: Gregory A Lundberg <[email protected]>
To: Mukund Rajyaguru <[email protected]>
Cc: [email protected]
Subject: Re: More information needed with guest account setup asnd workings.
In-Reply-To: <[email protected]>; from Mukund Rajyaguru on Fri, Jul 09, 1999 at 11:48:08AM +0100
References: <[email protected]>
Mime-Version: 1.0
Content-Type: multipart/signed; boundary="1y6imfT/xHuCvpN0"; micalg=pgp-md5;
       protocol="application/pgp-signature"
X-Mailer: Mutt 0.95.6i
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN


--1y6imfT/xHuCvpN0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable

On Fri, Jul 09, 1999 at 11:48:08AM +0100, Mukund Rajyaguru wrote:

> please can any one give me a site or more information on guest setup on
> WU-ftp. I need more information in who can execute site exec commands. At
> present for a guest account this cannot be done the error message I get
> is
>=20
> ?Invalid command

First off, this is a client-side problem.  You need to use QUOTE:

 quote site exec blah ...

(you may whap your head any time now).

Second, most sites don't need SITE EXEC at all.

Guest setup information is in the Guest HOWTO referenced from the FAQ.

The location of the latest version of wu-ftpd can be found in the=20
directory
=20
     ftp://ftp.wu-ftpd.org/pub/wu-ftpd/
=20
wu-ftpd Resource Center:  http://www.landfield.com/wu-ftpd/
wu-ftpd FAQ:              http://www.cetis.hvu.nl/~koos/wu-ftpd-faq.html
wu-ftpd list archive:     http://www.landfield.com/wu-ftpd/mail-archive/

--=20

Gregory A Lundberg              WU-FTPD Development Group
1441 Elmdale Drive              [email protected]
Kettering, OH 45409-1615 USA    1-800-809-2195

--1y6imfT/xHuCvpN0
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: 2.6.2

iQB1AwUBN4Xmhg2nXFkJc83RAQHQeAL/T95uLwHqhdAZYQHi2UZv2qv8Oqai74x2
jeeXCMvDoTiTkwrJ4GvoRmFznc5NmmpLc5q0NyigVaGsfmGDm+/EiNy73qR0gWNv
GcwSvbjc2yXue8G59gsLczbWFt9hJ/Kf
=Mqu0
-----END PGP SIGNATURE-----

--1y6imfT/xHuCvpN0--

From [email protected]  Fri Jul  9 07:21:46 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id HAA13873
       for <[email protected]>; Fri, 9 Jul 1999 07:21:46 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id HAA10184;
       Fri, 9 Jul 1999 07:22:09 -0500 (CDT)
Received: from mail.vr.net ([email protected] [205.133.13.8])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id HAA25811
       for <[email protected]>; Fri, 9 Jul 1999 07:18:24 -0500 (CDT)
Received: (from lundberg@localhost)
       by mail.vr.net (8.9.3/8.9.3) id IAA21029;
       Fri, 9 Jul 1999 08:17:46 -0400
Message-Id: <[email protected]>
Date: Fri, 9 Jul 1999 08:17:46 -0400
Reply-To: Gregory A Lundberg <[email protected]>
Sender: [email protected]
From: Gregory A Lundberg <[email protected]>
To: Giovanni Armanino <[email protected]>
Cc: [email protected]
Subject: Re: logging problem
In-Reply-To: <[email protected]>; from Giovanni Armanino on Fri, Jul 09, 1999 at 01:01:00PM +0200
References: <[email protected]> <[email protected]>
Mime-Version: 1.0
Content-Type: multipart/signed; boundary=EMQjp+MvU6EBGjHc; micalg=pgp-md5;
       protocol="application/pgp-signature"
X-Mailer: Mutt 0.95.6i
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN


--EMQjp+MvU6EBGjHc
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable

On Fri, Jul 09, 1999 at 01:01:00PM +0200, Giovanni Armanino wrote:

> As I told before, I'm running 2.5.0 daemon on hpux10.20.  I compiled with
> all defaults using the hp ansi c compiler.  the problem now is that the
> ftpd, even writing in the wtmp, doesn't write all used info:
>=20
> sample of 'last -R' output
>=20
> ....
> armanino ftp                           Thu Jul  8 16:02 - 16:03  (00:00)
> guest    ftp                           Thu Jul  8 15:58 - 16:02  (00:03)
> ftp      ftp                           Thu Jul  8 15:57 - 15:58  (00:00)
> armanino ttyp3        PC-xxxxxx.xxxxxx Thu Jul  8 15:28 - 15:38  (00:10)
> ....
>=20
> as you can see the remote host name is missed.
>=20
> Note that the ftpd bundled with hpux10.20 reports correctly the user's
> host name for each ftp session recorded in the wtmp. So, I think it
> should not just be a 'last command' problem as for old Solaris ...
>=20
> I tried also to add '-w', even if it's the default, to startup
> parameters, but nothing changes.
>=20
> Has anyone any suggestion to solve the wtmp problem?

src/logwtmp.c is where you need to look.

Most likely (after a quick read-through) you need HAVE_UT_UT_HOST defined.
That would be in src/config/config.hpx

Caveats:

- I got bored with seeing all that junk in my wtmp so I don't bother to
  log it any more.  So I don't recall if the hostname was logged on my
  system.  I s'pose I could turn it on to check if it's a real problem.

- I run Linux, not HP/UX.

--=20

Gregory A Lundberg              WU-FTPD Development Group
1441 Elmdale Drive              [email protected]
Kettering, OH 45409-1615 USA    1-800-809-2195

--EMQjp+MvU6EBGjHc
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: 2.6.2

iQB1AwUBN4XoaA2nXFkJc83RAQGkawL/Q8AC0yOJygmEt2Ksl3z2+xDkemjChh2o
rlqyY+2bmjxFx8puhLLGTG4Uv5Ry/+/zPTiQfapBs5tMAYMkoo1wfUlcZhY026ze
WZkyInGp9C7FwP2yPUgr/NDWqc0xmKz9
=I0uS
-----END PGP SIGNATURE-----

--EMQjp+MvU6EBGjHc--

From [email protected]  Fri Jul  9 12:27:36 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id MAA19277
       for <[email protected]>; Fri, 9 Jul 1999 12:27:35 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id MAA11394;
       Fri, 9 Jul 1999 12:26:25 -0500 (CDT)
Received: from orr.pwgsc.gc.ca (orr.pwgsc.gc.ca [198.103.167.14])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id MAA26023
       for <[email protected]>; Fri, 9 Jul 1999 12:20:06 -0500 (CDT)
Received:       id NAA17361; Fri, 9 Jul 1999 13:16:34 -0400
Received: by gateway ???
Received: by gateway id NAA29714
       for <[email protected]>; Fri, 9 Jul 1999 13:04:40 -0400 (EDT)
Message-Id: <[email protected]>
Date: Fri, 09 Jul 1999 13:20:10 -0700
Reply-To: [email protected]
Sender: [email protected]
From: Rocke Robertson <[email protected]>
To: wuftpd <[email protected]>
Subject: virtual root question
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="------------A56521132ABAEDDE146B1120"
X-Mailer: Mozilla 4.5 [en] (WinNT; U)
X-Accept-Language: en
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN

This is a multi-part message in MIME format.
--------------A56521132ABAEDDE146B1120
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit

Wu-ftpd 2.5.0 / Solaris 2.6.

I have multiple virtual entries for multiple sites.... like below. Each
site has guest,real and anonymous connections. Question is, is there a
way of having anonymous connections chroot() rootdir go to ~ftp as
defined in /etc/passwd as opposed to the virtual root defined in
/etc/ftpaccess.

### xxx1.pwgsc.gc.ca
virtual 132.226.204.155 root     /sites
virtual 132.226.204.155 banner   /etc/msg/banner.webdev02
virtual 132.226.204.155 logfile  /var/adm/xferlog
virtual 132.226.204.155 allow *
### xxx2.pwgsc.gc.ca
virtual 132.226.204.158 root     /sites
virtual 132.226.204.158 banner   /etc/msg/banner.webdev
virtual 132.226.204.158 logfile  /var/adm/xferlog
virtual 132.226.204.158 allow *
### xxx3.pwgsc.gc.ca
#virtual 132.226.204.152 root     /sites
#virtual 132.226.204.152 banner   /etc/msg/banner.tiger
#virtual 132.226.204.152 logfile  /var/adm/xferlog
#virtual 132.226.204.152 allow *

etc......

Thanks.
--
==========================================
Rocke Robertson
PWGSC-GTIS-CPS
Voice (613) 748-4604
Fax   (613) 748-4843
mailto:[email protected]
==========================================
"Did you know that if you play the Win NT 4.0 CD backwards, it plays a
satanic message!"
"Thats nothing! If you play it forwards, it installs Windows NT!!"


--------------A56521132ABAEDDE146B1120
Content-Type: text/x-vcard; charset=us-ascii;
name="rocker.vcf"
Content-Transfer-Encoding: 7bit
Content-Description: Card for Rocke Robertson
Content-Disposition: attachment;
filename="rocker.vcf"

begin:vcard
n:991-2604;Rocker UNIX/NT Support
x-mozilla-html:FALSE
version:2.1
email;internet:[email protected]
x-mozilla-cpt:;0
fn:Rocker UNIX/NT Support 991-2604
end:vcard

--------------A56521132ABAEDDE146B1120--


From [email protected]  Fri Jul  9 12:38:37 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id MAA19509
       for <[email protected]>; Fri, 9 Jul 1999 12:38:36 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id MAA20974;
       Fri, 9 Jul 1999 12:38:58 -0500 (CDT)
Received: from castor.ipac.caltech.edu (ipac.caltech.edu [131.215.11.35])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id MAA29898
       for <[email protected]>; Fri, 9 Jul 1999 12:33:05 -0500 (CDT)
Received: from light (light.ipac.caltech.edu [134.4.40.84])
         by castor.ipac.caltech.edu (8.8.8/8.6.4)
         with ESMTP id KAA19417; Fri, 9 Jul 1999 10:32:57 -0700 (PDT)
Received: (jrl@localhost) by light (SMI-8.6/8.6.4) id KAA29238; Fri, 9 Jul 1999 10:32:55 -0700
Message-Id: <199907091732.KAA29238@light>
Date: Fri, 9 Jul 1999 10:32:55 -0700
Reply-To: [email protected]
Sender: [email protected]
From: Jack Lampley <[email protected]>
To: [email protected]
Cc: [email protected]
Subject: Help with linked disks
X-Sun-Charset: US-ASCII
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN


I have been running the following version of ftp on a sparc 20 running Solaris 5.6.

FTP server (Version wu-2.4.2-academ[BETA-14]

I have added 2 new 34 gig disks to give more disk space. The disks were added
under /data/anon-ftp as links to the new partitions. When I ftp in and try to
cd to the new partitions I get the following error:

ftp> cd 2mass
550 2mass: Number of symbolic links encountered during path name traversal exceeds MAXSYMLINKS.

Can someone tell me if it is possible to use symbolic links within the ftp file
structure as I need to do. Is it just a matter of adding a line like MAXSYMLINKS =
1 or 2 into the ftpaccess file or somewhere?

Thanks for your help,

Jack Lampley, System Administrator
Infrared Processing and Analysis Center (IPAC)
California Institute of Technology (CalTech)
MS 100/22, Pasadena, CA 91125

Telephone : 818-397-9551
Internet  : [email protected]

From [email protected]  Fri Jul  9 12:47:25 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id MAA19710
       for <[email protected]>; Fri, 9 Jul 1999 12:47:24 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id MAA24878;
       Fri, 9 Jul 1999 12:46:05 -0500 (CDT)
Received: from mail.vr.net ([email protected] [205.133.13.8])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id MAA32693
       for <[email protected]>; Fri, 9 Jul 1999 12:43:31 -0500 (CDT)
Received: (from lundberg@localhost)
       by mail.vr.net (8.9.3/8.9.3) id NAA24198;
       Fri, 9 Jul 1999 13:42:53 -0400
Message-Id: <[email protected]>
Date: Fri, 9 Jul 1999 13:42:52 -0400
Reply-To: Gregory A Lundberg <[email protected]>
Sender: [email protected]
From: Gregory A Lundberg <[email protected]>
To: Rocke Robertson <[email protected]>
Cc: WU-FTPD Discussion List <[email protected]>
Subject: Re: virtual root question
In-Reply-To: <[email protected]>; from Rocke Robertson on Fri, Jul 09, 1999 at 01:20:10PM -0700
References: <[email protected]>
Mime-Version: 1.0
Content-Type: multipart/signed; boundary=Nq2Wo0NMKNjxTN9z; micalg=pgp-md5;
       protocol="application/pgp-signature"
X-Mailer: Mutt 0.95.6i
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN


--Nq2Wo0NMKNjxTN9z
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable

On Fri, Jul 09, 1999 at 01:20:10PM -0700, Rocke Robertson wrote:

> Wu-ftpd 2.5.0 / Solaris 2.6.
>=20
> I have multiple virtual entries for multiple sites.... like below. Each
> site has guest,real and anonymous connections. Question is, is there a
> way of having anonymous connections chroot() rootdir go to ~ftp as
> defined in /etc/passwd as opposed to the virtual root defined in
> /etc/ftpaccess.

No.

--=20

Gregory A Lundberg              WU-FTPD Development Group
1441 Elmdale Drive              [email protected]
Kettering, OH 45409-1615 USA    1-800-809-2195

--Nq2Wo0NMKNjxTN9z
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: 2.6.2

iQB1AwUBN4Y0mQ2nXFkJc83RAQHnQgMAidWAkoKjzDJGuHwUMiRtO+amWRAZS+Al
UlSVBggvxl7TFmScFB29tJHK8i3lldIlxEO5HHfNCO0RWqX8KA1Q/4nCvbcehpdY
A0SkFTwitoEJlYXvQRTKw3nL/qUsOKp3
=Yd6l
-----END PGP SIGNATURE-----

--Nq2Wo0NMKNjxTN9z--

From [email protected]  Fri Jul  9 12:58:14 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id MAA19916
       for <[email protected]>; Fri, 9 Jul 1999 12:58:13 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id MAA24660;
       Fri, 9 Jul 1999 12:58:32 -0500 (CDT)
Received: from mail.vr.net ([email protected] [205.133.13.8])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id MAA16906
       for <[email protected]>; Fri, 9 Jul 1999 12:54:56 -0500 (CDT)
Received: (from lundberg@localhost)
       by mail.vr.net (8.9.3/8.9.3) id NAA24313;
       Fri, 9 Jul 1999 13:54:39 -0400
Message-Id: <[email protected]>
Date: Fri, 9 Jul 1999 13:54:39 -0400
Reply-To: Gregory A Lundberg <[email protected]>
Sender: [email protected]
From: Gregory A Lundberg <[email protected]>
To: Jack Lampley <[email protected]>
Cc: WU-FTPD Discussion List <[email protected]>
Subject: Re: Help with linked disks
In-Reply-To: <199907091732.KAA29238@light>; from Jack Lampley on Fri, Jul 09, 1999 at 10:32:55AM -0700
References: <199907091732.KAA29238@light>
Mime-Version: 1.0
Content-Type: multipart/signed; boundary=DKU6Jbt7q3WqK7+M; micalg=pgp-md5;
       protocol="application/pgp-signature"
X-Mailer: Mutt 0.95.6i
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN


--DKU6Jbt7q3WqK7+M
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable

On Fri, Jul 09, 1999 at 10:32:55AM -0700, Jack Lampley wrote:

> I have been running the following version of ftp on a sparc 20 running
> Solaris 5.6.
>=20
> FTP server (Version wu-2.4.2-academ[BETA-14]

#include "standard-rootshell-warning"

> I have added 2 new 34 gig disks to give more disk space. The disks were
> added under /data/anon-ftp as links to the new partitions. When I ftp in
> and try to cd to the new partitions I get the following error:
>=20
> ftp> cd 2mass
> 550 2mass: Number of symbolic links encountered during path name traversa=
l exceeds MAXSYMLINKS.
>=20
> Can someone tell me if it is possible to use symbolic links within the
> ftp file structure as I need to do. Is it just a matter of adding a line
> like MAXSYMLINKS =3D 1 or 2 into the ftpaccess file or somewhere?

Upgrade to 2.5.0.  If the daemon still complains, look for a loop in the
symlinks (think "inside the chroot" as well as "globally" .. a non-loop,
globally, can be a loop once the daemon chroots).

MAXSYMLINKS is a compile-time constant defined by the OS.  It's probably
big enough; you should never need to change it.

Symlinks, so long as they are consistent with the inside-view after the
daemon chroot's, will work.

--=20

Gregory A Lundberg              WU-FTPD Development Group
1441 Elmdale Drive              [email protected]
Kettering, OH 45409-1615 USA    1-800-809-2195

--DKU6Jbt7q3WqK7+M
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: 2.6.2

iQB1AwUBN4Y3WQ2nXFkJc83RAQEPHQL+PNmnXasHZXfiSXU+8jf/5qTjOXL9idlq
Rn7odskisa0SFfIo4aIUJqZtc+jYd9NsSdfvomlq1GQEEb/AIfCZC3jxHUyWDssK
AeH73P4u4GoYuSh/30XclhbgPInSdFJk
=5PmN
-----END PGP SIGNATURE-----

--DKU6Jbt7q3WqK7+M--

From [email protected]  Fri Jul  9 16:41:31 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id QAA24085
       for <[email protected]>; Fri, 9 Jul 1999 16:41:31 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id QAA22656;
       Fri, 9 Jul 1999 16:39:56 -0500 (CDT)
Received: from wunet.wustl.edu (wunet.wustl.edu [128.252.120.2])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id QAA24778
       for <[email protected]>; Fri, 9 Jul 1999 16:35:45 -0500 (CDT)
Received: from stcgate.statcan.ca by wunet.wustl.edu (PMDF V4.3-10 #26974)
id <[email protected]>; Fri, 09 Jul 1999 16:35:22 -0500 (CDT)
Received: from stcinet (stcinet.statcan.ca [142.206.128.146])
by stcgate.statcan.ca (8.9.1/8.6.9) with SMTP id RAA25429 For
<[email protected]>; Fri, 9 Jul 1999 17:43:33 -0400 (EDT)
Received: from statcan.ca by statcan.ca (SMI-8.6/SMI-SVR4) id PAA01519; Fri,
9 Jul 1999 15:43:29 -0400; sender [email protected]
Message-Id: <[email protected]>
Date: Fri, 09 Jul 1999 15:52:54 -0400
Reply-To: [email protected]
Sender: [email protected]
From: [email protected]
To: [email protected]
Cc: "[email protected]" <[email protected]>
Subject: Question.
References: <[email protected]>
MIME-version: 1.0
Content-type: text/plain; charset=us-ascii
Content-transfer-encoding: 7bit
X-Mailer: Mozilla 4.03 [en] (WinNT; I)
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN

>

Hi,


I am receiving this message on the console:

ftpd: wtmpx /var/adm/wtmpx value too large for defined data type.
I am running the FTP Server Version wu-2.4.2-academ[BETA-16].

Would please explain me how to fix this.


Thanks.

Mhamed Nour


From [email protected]  Fri Jul  9 17:30:52 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id RAA25027
       for <[email protected]>; Fri, 9 Jul 1999 17:30:52 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id RAA15056;
       Fri, 9 Jul 1999 17:31:15 -0500 (CDT)
Received: from redhades.photronics.com (redhades.photronics.com [207.77.140.2])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id RAA31658
       for <[email protected]>; Fri, 9 Jul 1999 17:26:33 -0500 (CDT)
Received: from nimitz.photronics.com (NIMITZ.PHOTRONICS.COM [192.133.56.23])
       by redhades.photronics.com (8.8.8+Sun/8.8.8) with ESMTP id PAA02318
       for <[email protected]>; Fri, 9 Jul 1999 15:26:02 -0700 (PDT)
Received: from que.mil.photronics.com (que.mil.photronics.com [172.16.128.9])
       by nimitz.photronics.com (8.8.8+Sun/8.8.8) with ESMTP id PAA08005
       for <[email protected]>; Fri, 9 Jul 1999 15:26:02 -0700 (PDT)
Received: from mil.photronics.com ([172.16.129.207])
         by que.mil.photronics.com (Netscape Messaging Server 3.6)
          with ESMTP id AAAADF; Fri, 9 Jul 1999 15:30:12 -0700
Message-Id: <[email protected]>
Date: Fri, 09 Jul 1999 15:30:04 -0700
Reply-To: [email protected]
Sender: [email protected]
From: "Luis Galleguillos" <[email protected]>
To: Gregory A Lundberg <[email protected]>
Cc: Rocke Robertson <[email protected]>,
       WU-FTPD Discussion List <[email protected]>
Subject: Re: virtual root question
References: <[email protected]> <[email protected]>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
X-Mailer: Mozilla 4.5 [en] (Win95; I)
X-Accept-Language: en
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN

Hi all:

Can someone please explain the concept of virtual ftp, virtual hosts, virtual
root  and virtual entries.

Also how can this Wu-ftp help me if after customers  ftp in files into my
site, I would like to distribute these  files to multiple sites automatically
based on some criteria?  Can wu-ftp do it
or do I need other software or scripts? Recommendiations or ideas welcome.

It seems now that Sun will sell the Wu-ftp in its ISP software. Have all
wu-ftp development
available through public ftp etc. stopped because of this? How long ago did
development
stop if this is so?

Thanks


Luis

Gregory A Lundberg wrote:

> On Fri, Jul 09, 1999 at 01:20:10PM -0700, Rocke Robertson wrote:
>
> > Wu-ftpd 2.5.0 / Solaris 2.6.
> >
> > I have multiple virtual entries for multiple sites.... like below. Each
> > site has guest,real and anonymous connections. Question is, is there a
> > way of having anonymous connections chroot() rootdir go to ~ftp as
> > defined in /etc/passwd as opposed to the virtual root defined in
> > /etc/ftpaccess.
>
> No.
>
> --
>
> Gregory A Lundberg              WU-FTPD Development Group
> 1441 Elmdale Drive              [email protected]
> Kettering, OH 45409-1615 USA    1-800-809-2195
>
>   ------------------------------------------------------------------------
>    Part 1.2Type: application/pgp-signature


From [email protected]  Fri Jul  9 18:17:05 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id SAA25836
       for <[email protected]>; Fri, 9 Jul 1999 18:17:04 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id SAA32318;
       Fri, 9 Jul 1999 18:16:13 -0500 (CDT)
Received: from stcgate.statcan.ca (stcgate.statcan.ca [142.206.192.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id SAA29042
       for <[email protected]>; Fri, 9 Jul 1999 18:14:51 -0500 (CDT)
Received: from stcinet (stcinet.statcan.ca [142.206.128.146]) by stcgate.statcan.ca (8.9.1/8.6.9) with SMTP id TAA03236; Fri, 9 Jul 1999 19:22:13 -0400 (EDT)
Received: from statcan.ca by statcan.ca (SMI-8.6/SMI-SVR4)
       id RAA02718; Fri, 9 Jul 1999 17:06:29 -0400; sender [email protected]
Message-Id: <[email protected]>
Date: Fri, 09 Jul 1999 17:15:54 -0400
Reply-To: [email protected]
Sender: [email protected]
From: [email protected]
To: Gregory A Lundberg <[email protected]>
Cc: [email protected], WU-FTPD Discussion List <[email protected]>
Subject: Re: virtual root question
References: <[email protected]> <[email protected]>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
X-Mailer: Mozilla 4.03 [en] (WinNT; I)
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN


Hi,


I am receiving this message on the console:

ftpd: wtmpx /var/adm/wtmpx value too large for defined data type.
I am running the FTP Server Version wu-2.4.2-academ[BETA-16].

Would please explain me how to fix this.


Thanks.

Mhamed Nour




From [email protected]  Fri Jul  9 21:18:24 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id VAA03105
       for <[email protected]>; Fri, 9 Jul 1999 21:18:23 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id VAA16485;
       Fri, 9 Jul 1999 21:17:25 -0500 (CDT)
Received: from mail3.laffeycomputer.com ([email protected] [209.74.129.138])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id VAA24184
       for <[email protected]>; Fri, 9 Jul 1999 21:15:36 -0500 (CDT)
Received: by mail3.laffeycomputer.com (Postfix, from userid 1001)
       id 6A3A3E0EE; Fri,  9 Jul 1999 21:14:22 -0500 (CDT)
Message-Id: <Pine.LNX.4.10.9907092113340.24485-100000@tripe.laffeycomputer.com>
Date: Fri, 9 Jul 1999 21:14:22 -0500 (CDT)
Reply-To: [email protected]
Sender: [email protected]
From: Joe Laffey <[email protected]>
To: [email protected]
Subject: 2.5.0 and NetBSD segfault
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN

wu-ftpd 2.5.0 segfaults under NetBSD 1.3.2 (gcc 2.7.2.2+myc1) whenever a
users tried to log in with a username NOT in /etc/passwd. The user is
prompted for a password and then the segfault occurs.

I have debugged wu-ftpd and found this bug to be an attempt to access a
member of a NULL passwd struct. I added a check for a non-NULL value and
all works fine.

Below is the diff...

Feel free to contact me if you need more info.

Thank you.

Joe Laffey
LAFFEY Computer Imaging
St. Louis, MO
http://www.laffeycomputer.com/
------------------------------
Your mouse has moved.   Windows NT must be restarted for the change to
take effect.   Reboot now?  [ OK ]



From [email protected]  Fri Jul  9 21:30:07 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id VAA03540
       for <[email protected]>; Fri, 9 Jul 1999 21:30:06 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id VAA20871;
       Fri, 9 Jul 1999 21:30:16 -0500 (CDT)
Received: from mail3.laffeycomputer.com ([email protected] [209.74.129.138])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id VAA01570
       for <[email protected]>; Fri, 9 Jul 1999 21:25:10 -0500 (CDT)
Received: by mail3.laffeycomputer.com (Postfix, from userid 1001)
       id 09F21E0EE; Fri,  9 Jul 1999 21:23:55 -0500 (CDT)
Message-Id: <Pine.LNX.4.10.9907092123070.24485-100000@tripe.laffeycomputer.com>
Date: Fri, 9 Jul 1999 21:23:55 -0500 (CDT)
Reply-To: [email protected]
Sender: [email protected]
From: Joe Laffey <[email protected]>
To: [email protected]
Subject: Re: 2.5.0 and NetBSD segfault
In-Reply-To: <Pine.LNX.4.10.9907092113340.24485-100000@tripe.laffeycomputer.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN

On Fri, 9 Jul 1999, Joe Laffey wrote:

> wu-ftpd 2.5.0 segfaults under NetBSD 1.3.2 (gcc 2.7.2.2+myc1) whenever a
> users tried to log in with a username NOT in /etc/passwd. The user is
> prompted for a password and then the segfault occurs.
>
> I have debugged wu-ftpd and found this bug to be an attempt to access a
> member of a NULL passwd struct. I added a check for a non-NULL value and
> all works fine.
>
> Below is the diff...

(Forgot that part...)

diff ftpd.c.OLD ftpd.c
2406c2406
<        if (skey_haskey(pw->pw_name) == 0 &&
---
>        if (pw != NULL && skey_haskey(pw->pw_name) == 0 &&   /* 1999-7-9
Added check for NULL pw - [email protected] */


Joe Laffey
LAFFEY Computer Imaging
St. Louis, MO
http://www.laffeycomputer.com/
------------------------------
Your mouse has moved.   Windows NT must be restarted for the change to
take effect.   Reboot now?  [ OK ]



From [email protected]  Sat Jul 10 10:15:05 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id KAA23491
       for <[email protected]>; Sat, 10 Jul 1999 10:15:05 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id KAA22226;
       Sat, 10 Jul 1999 10:14:09 -0500 (CDT)
Received: from mail.vr.net ([email protected] [205.133.13.8])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id KAA23703
       for <[email protected]>; Sat, 10 Jul 1999 10:08:39 -0500 (CDT)
Received: (from lundberg@localhost)
       by mail.vr.net (8.9.3/8.9.3) id LAA00113;
       Sat, 10 Jul 1999 11:08:30 -0400
Message-Id: <[email protected]>
Date: Sat, 10 Jul 1999 11:08:29 -0400
Reply-To: Gregory A Lundberg <[email protected]>
Sender: [email protected]
From: Gregory A Lundberg <[email protected]>
To: [email protected]
Cc: WU-FTPD Discussion List <[email protected]>
Subject: Re: virtual root question
In-Reply-To: <[email protected]>; from [email protected] on Fri, Jul 09, 1999 at 05:15:54PM -0400
References: <[email protected]> <[email protected]> <[email protected]>
Mime-Version: 1.0
Content-Type: multipart/signed; boundary="tThc/1wpZn/ma/RB"; micalg=pgp-md5;
       protocol="application/pgp-signature"
X-Mailer: Mutt 0.95.6i
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN


--tThc/1wpZn/ma/RB
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable

On Fri, Jul 09, 1999 at 05:15:54PM -0400, [email protected] wrote:

> I am receiving this message on the console:
>=20
> ftpd: wtmpx /var/adm/wtmpx value too large for defined data type.
> I am running the FTP Server Version wu-2.4.2-academ[BETA-16].
>=20
> Would please explain me how to fix this.

Begin with upgrading to 2.5.0 and seeing if the problem recurs.  You want
to upgrade anyway for security purposes.

The location of the latest version of wu-ftpd can be found in the=20
directory
=20
     ftp://ftp.wu-ftpd.org/pub/wu-ftpd/
=20
wu-ftpd Resource Center:  http://www.landfield.com/wu-ftpd/
wu-ftpd FAQ:              http://www.cetis.hvu.nl/~koos/wu-ftpd-faq.html
wu-ftpd list archive:     http://www.landfield.com/wu-ftpd/mail-archive/

--=20

Gregory A Lundberg              WU-FTPD Development Group
1441 Elmdale Drive              [email protected]
Kettering, OH 45409-1615 USA    1-800-809-2195

--tThc/1wpZn/ma/RB
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5

iQB1AwUBN4dT2Q2nXFkJc83RAQH9eQL+Iq2rXlbmk+jnYgouBpcsMtnK80S6xEZG
65xDpgNMqKQmLjedum8L7VxWqYe+Q4/8V2v1L+mADGKXHgIYboZLS5VfCoj3KJEc
nH6Mszx5Rnm914WgqkcQpZWEez8lD2C4
=jZ9T
-----END PGP SIGNATURE-----

--tThc/1wpZn/ma/RB--

From [email protected]  Sat Jul 10 11:05:50 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id LAA24035
       for <[email protected]>; Sat, 10 Jul 1999 11:05:49 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id LAA11876;
       Sat, 10 Jul 1999 11:04:02 -0500 (CDT)
Received: from mail.vr.net ([email protected] [205.133.13.8])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id KAA08938
       for <[email protected]>; Sat, 10 Jul 1999 10:58:21 -0500 (CDT)
Received: (from lundberg@localhost)
       by mail.vr.net (8.9.3/8.9.3) id LAA00389;
       Sat, 10 Jul 1999 11:58:11 -0400
Message-Id: <[email protected]>
Date: Sat, 10 Jul 1999 11:58:10 -0400
Reply-To: Gregory A Lundberg <[email protected]>
Sender: [email protected]
From: Gregory A Lundberg <[email protected]>
To: Luis Galleguillos <[email protected]>
Cc: Rocke Robertson <[email protected]>,
       WU-FTPD Discussion List <[email protected]>
Subject: Re: virtual root question
In-Reply-To: <[email protected]>; from Luis Galleguillos on Fri, Jul 09, 1999 at 03:30:04PM -0700
References: <[email protected]> <[email protected]> <[email protected]>
Mime-Version: 1.0
Content-Type: multipart/signed; boundary="CUfgB8w4ZwR/yMy5"; micalg=pgp-md5;
       protocol="application/pgp-signature"
X-Mailer: Mutt 0.95.6i
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN


--CUfgB8w4ZwR/yMy5
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable

On Fri, Jul 09, 1999 at 03:30:04PM -0700, Luis Galleguillos wrote:

> Can someone please explain the concept of virtual ftp, virtual hosts,
> virtual root and virtual entries.

WU-FTPD supports IP-addressed multiple hosting on a single server (if, of
course, your OS supports it).



> Also how can this Wu-ftp help me if after customers ftp in files into my
> site, I would like to distribute these files to multiple sites
> automatically based on some criteria?  Can wu-ftp do it or do I need
> other software or scripts? Recommendiations or ideas welcome.

You will need to do some scripting.  cron and shell/perl come to mind.
BeroFTPD (a derivative of wu-ftpd) has the ability to generate an email on
upload; you could use procmail to process the files upon receipt of that
email.



> It seems now that Sun will sell the Wu-ftp in its ISP software. Have all
> wu-ftp development available through public ftp etc. stopped because of
> this? How long ago did development stop if this is so?

Sun cannot 'sell' wu-ftpd.  They can provide it, free of charge, on media
(which they can charge a nominal fee for), or with other software (which
they can charge for or not depending upon licensing of that software).

Sun does not now, nor has it ever, had anything to do with wu-ftpd
development.  IMHO Sun will be including WU-FTPD, not because development
ceased and they have taken over, but because development has, after nearly
a decade hiatus, begun again.



WU-FTPD was initially developed under a research grant at the Washington
University in St. Louis.  That grant was not renewed after Bryan
D. O'Connor graduated.  Development languished as a result.  Bryan's last
official release as 2.4 on April 13, 1994.



Stan Barber (academ.com) took on the task of merging some early patches
(mainly his and the Hobbit patches) into the daemon.  This was initially=20
going to be version 2.4.1 but there were problems and Stan decided to enter
a 'beta-cycle', renaming the version to 2.4.2-beta.

During the beta-test period, Stan took no bug fixes or feature suggestions
from the mailing lists.  He would take bug fixes if emailed directly to his
bugs mailbox.  Appearently, there was also a way to get new features added,
but Stan never publicly discussed that process.  His publicly state policy
was that no new features would be accepted.

Stan initially promised the beta-cycle would last only a few months.
Initially, however, there were so many bugs in the code that he was forced
to continually push off the final-release date for 2.4.2.  Years passed.

During those years, developers continued to work on the daemon.  Most
importantly, Kent Landfield released his NEWVIRT scheme/patches, Bernhard
Rosenkrazen began his BeroFTPD project to support FTPSEC and include a
built-in 'ls' command, and I began the VR-upgrades to gather all the ideas
and fixes on the mailing lists which Stan ignored.

Also during those years, a number of us began to privately discuss the
formation of an open development group to take over maintenance of the
daemon.  Our concern was Stan's increasing lack of attention and the
lengthening period between his updates.  Most of this discussion took place
in mid-1998; it was finally decided to give Stan until the end of the year
to finalize his work.

On February 26, 1999, Stan released version 2.4.2-final without public
announcement.



On April 1, 1999, the formation of the WU-FTPD Development Group was
announced.  Bernhard and I created the list of those we initially invited
and members.  Happily, many of those people accepted and have joined the
development group.

On May 25, 1999, the WU-FTPD Development Group offically released version
2.5.0.  For VR-upgrades users, this was a maintenance release.  For all
others (except BeroFTPD) it is a critical security update.  Since the group
decided to begin from the 2.4.2-vr17 code based, I served as release
manager for that version.

The development group is currently working on the next version.  Our
current goal is to merge the major features of NEWVIRT and BeroFTPD back
into the base daemon; thus terminating one or both of those branches of
development.  With this goal, Bernhard is serving as release manager.  It
is not clear at this point whether those goals will be met for the
very-next release.  If not we will put out 2.5.1 as a maintenance release.
Otherwise, we will put out a major update (probably called version 2.6.0)
including, as a minimum, NEWVIRT and/or a built-in 'ls' command.

--=20

Gregory A Lundberg              WU-FTPD Development Group
1441 Elmdale Drive              [email protected]
Kettering, OH 45409-1615 USA    1-800-809-2195

--CUfgB8w4ZwR/yMy5
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5

iQB1AwUBN4dffw2nXFkJc83RAQGcWgL+PT7pJawuOJUcaqDS7/q8dTrV4RiruubI
qS88/rASQNA//Q0+cC5k06YJmoIosR2ZNML2QzKy5tq0b7RUFPkQwxr2a2Wa79xn
qlq/64Om9EtkZCkO4Wn6lazBEI9Q596V
=mEkE
-----END PGP SIGNATURE-----

--CUfgB8w4ZwR/yMy5--

From [email protected]  Sat Jul 10 11:12:47 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id LAA24114
       for <[email protected]>; Sat, 10 Jul 1999 11:12:47 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id LAA00666;
       Sat, 10 Jul 1999 11:10:30 -0500 (CDT)
Received: from mail.vr.net ([email protected] [205.133.13.8])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id LAA13932
       for <[email protected]>; Sat, 10 Jul 1999 11:03:07 -0500 (CDT)
Received: (from lundberg@localhost)
       by mail.vr.net (8.9.3/8.9.3) id MAA00437;
       Sat, 10 Jul 1999 12:03:04 -0400
Message-Id: <[email protected]>
Date: Sat, 10 Jul 1999 12:03:04 -0400
Reply-To: Gregory A Lundberg <[email protected]>
Sender: [email protected]
From: Gregory A Lundberg <[email protected]>
To: Joe Laffey <[email protected]>
Cc: WU-FTPD Discussion List <[email protected]>
Subject: Re: 2.5.0 and NetBSD segfault
In-Reply-To: <Pine.LNX.4.10.9907092123070.24485-100000@tripe.laffeycomputer.com>; from Joe Laffey on Fri, Jul 09, 1999 at 09:23:55PM -0500
References: <Pine.LNX.4.10.9907092113340.24485-100000@tripe.laffeycomputer.com> <Pine.LNX.4.10.9907092123070.24485-100000@tripe.laffeycomputer.com>
Mime-Version: 1.0
Content-Type: multipart/signed; boundary="6zdv2QT/q3FMhpsV"; micalg=pgp-md5;
       protocol="application/pgp-signature"
X-Mailer: Mutt 0.95.6i
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN


--6zdv2QT/q3FMhpsV
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable

> > wu-ftpd 2.5.0 segfaults under NetBSD 1.3.2 (gcc 2.7.2.2+myc1) whenever
> > a users tried to log in with a username NOT in /etc/passwd. The user is
> > prompted for a password and then the segfault occurs.
> >=20
> > I have debugged wu-ftpd and found this bug to be an attempt to access a
> > member of a NULL passwd struct. I added a check for a non-NULL value
> > and all works fine.
>=20
> diff ftpd.c.OLD ftpd.c
> 2406c2406
> <        if (skey_haskey(pw->pw_name) =3D=3D 0 &&
> ---
> >        if (pw !=3D NULL && skey_haskey(pw->pw_name) =3D=3D 0 &&

Thank you.

While most of the development group members participate in the mailing
lists, and will see these reports as a result, the best way to ensure we
see a bug report or feature request and to submit patches for them is
covered in the FAQ.

--=20

Gregory A Lundberg              WU-FTPD Development Group
1441 Elmdale Drive              [email protected]
Kettering, OH 45409-1615 USA    1-800-809-2195

--6zdv2QT/q3FMhpsV
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5

iQB1AwUBN4dgpQ2nXFkJc83RAQF44QMAw+GyN/w3G+N9CWKQ3zt1OTt2xABj6kZe
NXwyiTspu1dhIpZ1iVaYT7BQkCosNbnPwNI2823mZbMpnsDY7Bl+Ampgieh/OW74
SnJbJ9UlFJ7Agqgk5wBN/zkK15phuk6H
=3mfx
-----END PGP SIGNATURE-----

--6zdv2QT/q3FMhpsV--

From [email protected]  Sat Jul 10 17:02:11 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id RAA27795
       for <[email protected]>; Sat, 10 Jul 1999 17:02:10 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id QAA28910;
       Sat, 10 Jul 1999 16:59:33 -0500 (CDT)
Received: from home.welcomehome.org (home.welcomehome.org [209.6.45.100])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id QAA24925
       for <[email protected]>; Sat, 10 Jul 1999 16:54:11 -0500 (CDT)
Received: (from paonia@localhost)
       by home.welcomehome.org (8.9.3/8.9.3/Debian/GNU) id RAA28234;
       Sat, 10 Jul 1999 17:56:04 -0400
Message-Id: <[email protected]>
Date: Sat, 10 Jul 1999 17:56:03 -0400 (EDT)
Reply-To: [email protected]
Sender: [email protected]
From: Paonia Ezrine <[email protected]>
To: [email protected]
Cc: [email protected] (Cerberus)
Subject: virtual via tcpd or inetd
In-Reply-To: <[email protected]> from Gregory A Lundberg at "Jun 28, 1999  6: 0:48 pm"
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
X-Mailer: ELM [version 2.4ME+ PL48 (25)]
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN

I seem to remember a version of the virtual howto that include a way to
get inetd or tcpd to invoke different wu.ftpd's. Can someone tell me how
to do this. (I am not doing this for wu-ftpd just remember seeing it in
the docs).
thanks
paonia

From [email protected]  Sun Jul 11 11:40:13 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id LAA07114
       for <[email protected]>; Sun, 11 Jul 1999 11:40:12 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id LAA24615;
       Sun, 11 Jul 1999 11:37:49 -0500 (CDT)
Received: from mail.vr.net ([email protected] [205.133.13.8])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id LAA09197
       for <[email protected]>; Sun, 11 Jul 1999 11:32:07 -0500 (CDT)
Received: (from lundberg@localhost)
       by mail.vr.net (8.9.3/8.9.3) id MAA07111;
       Sun, 11 Jul 1999 12:32:02 -0400
Message-Id: <[email protected]>
Date: Sun, 11 Jul 1999 12:32:02 -0400
Reply-To: [email protected]
Sender: [email protected]
From: Gregory A Lundberg <[email protected]>
To: Paonia Ezrine <[email protected]>
Cc: WU-FTPD Discussion List <[email protected]>,
       Cerberus <[email protected]>
Subject: Re: virtual via tcpd or inetd
In-Reply-To: <[email protected]>; from Paonia Ezrine on Sat, Jul 10, 1999 at 05:56:03PM -0400
References: <[email protected]> <[email protected]>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
X-Mailer: Mutt 0.95.6i
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN

On Sat, Jul 10, 1999 at 05:56:03PM -0400, Paonia Ezrine wrote:

> I seem to remember a version of the virtual howto that include a way to
> get inetd or tcpd to invoke different wu.ftpd's. Can someone tell me how
> to do this. (I am not doing this for wu-ftpd just remember seeing it in
> the docs).

Simple: replace inetd with xinetd

--

Gregory A Lundberg              Senior Partner, VRnet Company
1441 Elmdale Drive              [email protected]
Kettering, OH 45409-1615 USA    1-800-809-2195

From [email protected]  Sun Jul 11 12:41:19 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id MAA07704
       for <[email protected]>; Sun, 11 Jul 1999 12:41:18 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id MAA10697;
       Sun, 11 Jul 1999 12:41:38 -0500 (CDT)
Received: from niteowl.userfriendly.net ([email protected] [216.130.6.28])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id MAA01102
       for <[email protected]>; Sun, 11 Jul 1999 12:38:33 -0500 (CDT)
Received: from userfriendly.net ([email protected] [10.1.1.50])
       by niteowl.userfriendly.net (8.9.3/8.9.3) with ESMTP id NAA14712
       for <[email protected]>; Sun, 11 Jul 1999 13:38:33 -0400
Message-Id: <[email protected]>
Date: Sun, 11 Jul 1999 13:34:43 -0400
Reply-To: [email protected]
Sender: [email protected]
From: hUnTeR <[email protected]>
To: WU-FTPD Discussion List <[email protected]>
Subject: Symlinks in anon FTP
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
X-Mailer: Mozilla 4.61 [en] (Win98; U)
X-Accept-Language: en
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN

I wish to create a sym link to another disk within anonFTP. The actual
directory site on a second disk /dev/sdb1 mounted as /home2 and the
directory is /home2/ftp/pub/linux/RDF where all the metadata files for
the linux RDF sit. what i wanted to do was have a symlink under
/home/ftp/pub/linux for RDF which would take users to that particular
disk and directory. Is this possible with v2.5.0? I keep getting the
error when i try to cwd in ftp about no such file or directory even tho
i can see the link.

Regards,
--
Michael B. Weiner
Systems Administrator/Partner
The UserFriendly Network (UFN)
--

            / /  (_)__  __ ____  __
           / /__/ / _ \/ // /\ \/ /
          /____/_/_//_/\_,_/ /_/\_\

    * * * CHOICE OF A GNU GENERATION * * *

From [email protected]  Sun Jul 11 13:00:33 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id NAA07908
       for <[email protected]>; Sun, 11 Jul 1999 13:00:32 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id NAA17545;
       Sun, 11 Jul 1999 13:00:56 -0500 (CDT)
Received: from penguin.wise.edt.ericsson.se (penguin-ext.wise.edt.ericsson.se [194.237.142.110])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id MAA28415
       for <[email protected]>; Sun, 11 Jul 1999 12:58:22 -0500 (CDT)
Received: from ms.uab.ericsson.se (ms.uab.ericsson.se [134.138.44.44])
       by penguin.wise.edt.ericsson.se (8.9.3/8.9.3/WIREfire-1.3) with ESMTP id TAA19627;
       Sun, 11 Jul 1999 19:54:58 +0200 (MET DST)
Received: from uabs28 (uabs28 [134.138.228.5])
       by ms.uab.ericsson.se (8.9.3/8.9.3/uab-1.36) with ESMTP id TAA20496;
       Sun, 11 Jul 1999 19:54:57 +0200 (MET DST)
Received: from uab.ericsson.se by uabs28 (8.8.8+Sun/client-1.3uab2)
       id TAA25527; Sun, 11 Jul 1999 19:54:56 +0200 (MET DST)
Message-Id: <[email protected]>
Date: Sun, 11 Jul 1999 19:53:31 +0200
Reply-To: [email protected]
Sender: [email protected]
From: Johan Claesson <[email protected]>
To: [email protected]
Cc: [email protected]
Subject: Re: Unable to see files via a web browser
References: <v04020a02b3a25cda33ae@[130.246.73.193]>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
X-Sender: [email protected]
X-Mailer: Mozilla 4.6 [en] (X11; I; SunOS 5.7 i86pc)
X-Accept-Language: sv, en
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN

Neil Calton wrote:
>
> I have installed wu-ftpd-2.5.0 on a Sun running Solaris 2.7.
> Everything seems to work when using an ftp client from another
> Unix box, i.e anonymous and real access is accepted.
>
> However, when trying to use FTP from a web browser then
> none of the files are visible. The README file I have put in the ~/ftp/pub
> directory is displayed but the user cannot see any files.
>
> I have set the permissions on ~ftp/dev/tcp to be 666 as the FAQ suggests
> but to no avail. Has anyone got any suggestions as to what else I might
> need to do.
>

Hi Neil,

I had a similiar problem with Solaris 2.6. The problem was that the ~ftp
device was mounted with the nosuid flag set. Try mount it without the
flag set.


Regards Johan

From [email protected]  Sun Jul 11 15:10:28 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id PAA09367
       for <[email protected]>; Sun, 11 Jul 1999 15:10:27 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id PAA11945;
       Sun, 11 Jul 1999 15:10:56 -0500 (CDT)
Received: from mail.vr.net ([email protected] [205.133.13.8])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id PAA06391
       for <[email protected]>; Sun, 11 Jul 1999 15:10:22 -0500 (CDT)
Received: (from lundberg@localhost)
       by mail.vr.net (8.9.3/8.9.3) id QAA08250;
       Sun, 11 Jul 1999 16:10:15 -0400
Message-Id: <[email protected]>
Date: Sun, 11 Jul 1999 16:10:15 -0400
Reply-To: Gregory A Lundberg <[email protected]>
Sender: [email protected]
From: Gregory A Lundberg <[email protected]>
To: hUnTeR <[email protected]>
Cc: WU-FTPD Discussion List <[email protected]>
Subject: Re: Symlinks in anon FTP
In-Reply-To: <[email protected]>; from hUnTeR on Sun, Jul 11, 1999 at 01:34:43PM -0400
References: <[email protected]>
Mime-Version: 1.0
Content-Type: multipart/signed; boundary=KsGdsel6WgEHnImy; micalg=pgp-md5;
       protocol="application/pgp-signature"
X-Mailer: Mutt 0.95.6i
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN


--KsGdsel6WgEHnImy
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable

On Sun, Jul 11, 1999 at 01:34:43PM -0400, hUnTeR wrote:

> I wish to create a sym link to another disk within anonFTP. The actual
> directory site on a second disk /dev/sdb1 mounted as /home2 and the
> directory is /home2/ftp/pub/linux/RDF where all the metadata files for
> the linux RDF sit. what i wanted to do was have a symlink under
> /home/ftp/pub/linux for RDF which would take users to that particular
> disk and directory. Is this possible with v2.5.0? I keep getting the
> error when i try to cwd in ftp about no such file or directory even tho i
> can see the link.

Mount sdb1 somewhere inside /home/ftp .. I'd do it as a read-only mount and
keep the original as the read-write mount.

--=20

Gregory A Lundberg              WU-FTPD Development Group
1441 Elmdale Drive              [email protected]
Kettering, OH 45409-1615 USA    1-800-809-2195

--KsGdsel6WgEHnImy
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5

iQB1AwUBN4jsEg2nXFkJc83RAQEP9wMAvxRpqcqg2ecwOtY25R1uwaNfQhWRHiVc
4e96La+hZ08BDIm++AsVaBiL8IUtt4RyxdtHCm76py5rK7gTL6+D+hSOgnPvPi6j
0H4cK6S9IEEgsPM/fKMZ5CWVfyajl6/I
=Knft
-----END PGP SIGNATURE-----

--KsGdsel6WgEHnImy--

From [email protected]  Mon Jul 12 11:36:39 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id LAA27293
       for <[email protected]>; Mon, 12 Jul 1999 11:36:38 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id LAA00546;
       Mon, 12 Jul 1999 11:35:23 -0500 (CDT)
Received: from stcgate.statcan.ca (stcgate.statcan.ca [142.206.192.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id LAA24386
       for <[email protected]>; Mon, 12 Jul 1999 11:29:13 -0500 (CDT)
Received: from stcinet (stcinet.statcan.ca [142.206.128.146]) by stcgate.statcan.ca (8.9.1/8.6.9) with SMTP id MAA06503; Mon, 12 Jul 1999 12:36:32 -0400 (EDT)
Received: from statcan.ca by statcan.ca (SMI-8.6/SMI-SVR4)
       id LAA01736; Mon, 12 Jul 1999 11:08:06 -0400; sender [email protected]
Message-Id: <[email protected]>
Date: Mon, 12 Jul 1999 11:17:46 -0400
Reply-To: [email protected]
Sender: [email protected]
From: [email protected]
To: Gregory A Lundberg <[email protected]>
Cc: WU-FTPD Discussion List <[email protected]>,
       "[email protected]" <[email protected]>
Subject: Re: virtual root question
References: <[email protected]> <[email protected]> <[email protected]> <[email protected]>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
X-Mailer: Mozilla 4.03 [en] (WinNT; I)
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN

Are there any rapid fix before upgrading to 2.5.0?

Mhamed Nour

Gregory A Lundberg wrote:

> On Fri, Jul 09, 1999 at 05:15:54PM -0400, [email protected] wrote:
>
> > I am receiving this message on the console:
> >
> > ftpd: wtmpx /var/adm/wtmpx value too large for defined data type.
> > I am running the FTP Server Version wu-2.4.2-academ[BETA-16].
> >
> > Would please explain me how to fix this.
>
> Begin with upgrading to 2.5.0 and seeing if the problem recurs.  You want
> to upgrade anyway for security purposes.
>
> The location of the latest version of wu-ftpd can be found in the
> directory
>
>       ftp://ftp.wu-ftpd.org/pub/wu-ftpd/
>
> wu-ftpd Resource Center:  http://www.landfield.com/wu-ftpd/
> wu-ftpd FAQ:              http://www.cetis.hvu.nl/~koos/wu-ftpd-faq.html
> wu-ftpd list archive:     http://www.landfield.com/wu-ftpd/mail-archive/
>
> --
>
> Gregory A Lundberg              WU-FTPD Development Group
> 1441 Elmdale Drive              [email protected]
> Kettering, OH 45409-1615 USA    1-800-809-2195
>
>                                                   ------------------------------------------------------------------------
>
>    Part 1.2   Type: application/pgp-signature




From [email protected]  Mon Jul 12 14:11:51 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id OAA00283
       for <[email protected]>; Mon, 12 Jul 1999 14:11:50 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id OAA28674;
       Mon, 12 Jul 1999 14:11:01 -0500 (CDT)
Received: from www.maned.com (www.maned.com [199.224.118.11])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id OAA23428
       for <[email protected]>; Mon, 12 Jul 1999 14:05:11 -0500 (CDT)
Received: from [199.224.118.245] ([199.224.118.245])
       by www.maned.com (8.8.5/8.8.5) with ESMTP id PAA03634
       for <[email protected]>; Mon, 12 Jul 1999 15:04:36 -0400 (EDT)
Message-Id: <v04020a01b3afe977ca1c@[199.224.118.245]>
Date: Mon, 12 Jul 1999 15:04:34 -0400
Reply-To: [email protected]
Sender: [email protected]
From: "Thomas R. Kimpton" <[email protected]>
To: [email protected]
Subject: using <class> with 'delete' keyword
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
X-Sender: [email protected]
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN

My intent is to allow anonymous login from within my domain, allowing
them upload/download/delete permission on a global basis (global to
the ftp root, that is), and restricted access to anonymous users
outside of our domain with *no* delete permission.  I've got everything
except delete working:

========================================================================

class   staff   real  *

# Create a class of anonymous ftp users from those who login from
# within the maned.com domain.
class privilegedftp anonymous *.maned.com
class privilegedftp anonymous 199.224.118.*
# class privilegedftp guest *.maned.com
# class privilegedftp guest 199.224.118.*

class anonftp anonymous *

delete yes real,class=privilegedftp
#delete no class=anonftp
delete no anonymous,guest

# Set the gid to ftp when this class logs in.
autogroup ftp privilegedftp

# Don't allow anyone to upload to the ftp directory
upload /opt/home/anonftp * no

# Well... ok, let the privileged guys upload anywhere they want
# and allow them to create directories
upload class=privilegedftp /opt/home/anonftp * yes ftp ftp 0664 dirs

# Oh, and allow the privileged people to delete things.
#delete yes class=privilegedftp

# Put up a drop box for uploading. No reading here, sorry. Also, no making directories.
upload /opt/home/anonftp /pub/upload yes ftpuser ftp 0440 nodirs

========================================================================

I've read the FAQs, the man pages, the examples, the web pages, the
list archive (ok not all of them, but, most of them with the word 'delete'
in them :-) and tried hacking the source to let me do it. As yet, to
no avail.  Can anyone spot the glaring error that will make me
strike my forehead and emit a heartfelt "Doh!"?

Thanks!

Tom Kimpton

Oz:  So, do you guys steal weapons from the Army a lot?
Willow:  Well, we don't have cable, so we have to make
our own fun.
-- Innocence - Buffy the Vampire Slayer

From [email protected]  Mon Jul 12 14:30:05 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id OAA00751
       for <[email protected]>; Mon, 12 Jul 1999 14:30:05 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id OAA21372;
       Mon, 12 Jul 1999 14:30:27 -0500 (CDT)
Received: from pecos.mis.earthlink.net (pecos.mis.earthlink.net [207.217.69.23])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id OAA07804
       for <[email protected]>; Mon, 12 Jul 1999 14:25:25 -0500 (CDT)
Received: by pecos.mis.earthlink.net with Internet Mail Service (5.5.2448.0)
       id <N80YFMB8>; Mon, 12 Jul 1999 12:25:26 -0700
Message-Id: <1BEE67ADF602D3119F9A0008C79174C70E8234@PETRIFIED>
Date: Mon, 12 Jul 1999 12:25:22 -0700
Reply-To: [email protected]
Sender: [email protected]
From: "Durham, Kenneth J" <[email protected]>
To: [email protected]
Subject: users root dir
MIME-Version: 1.0
Content-Type: text/plain;
       charset="iso-8859-1"
X-Mailer: Internet Mail Service (5.5.2448.0)
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN

I have been trying to get my wu ftp to keep users in the home dir.  but i
cant seem to get it right.  ive been looking for the documentation but it
seems all the links are dead.  can someone please help me out.  thank you
for your time

From [email protected]  Mon Jul 12 19:45:11 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id TAA08164
       for <[email protected]>; Mon, 12 Jul 1999 19:45:10 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id TAA11305;
       Mon, 12 Jul 1999 19:44:21 -0500 (CDT)
Received: from bastion.artisan.com (bastion.artisan.com [206.86.228.68])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id TAA03900
       for <[email protected]>; Mon, 12 Jul 1999 19:41:19 -0500 (CDT)
Received: from ypmaster.artisan.com (ypmaster [172.16.2.1])
       by bastion.artisan.com (8.9.2/8.9.2) with ESMTP id RAA09793
       for <[email protected]>; Mon, 12 Jul 1999 17:40:30 -0700 (PDT)
Received: from halo.artisan.com (halo [172.16.10.76])
       by ypmaster.artisan.com (8.9.2/8.9.2) with ESMTP id RAA10157
       for <[email protected]>; Mon, 12 Jul 1999 17:41:18 -0700 (PDT)
Received: (from susannah@localhost)
       by halo.artisan.com (8.9.2/8.9.2) id RAA22670
       for [email protected]; Mon, 12 Jul 1999 17:41:17 -0700 (PDT)
Message-Id: <[email protected]>
Date: Mon, 12 Jul 1999 17:41:17 -0700
Reply-To: [email protected]
Sender: [email protected]
From: Susannah Gort <[email protected]>
To: [email protected]
Subject: Problem w/upload clauses & files in class defn
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
X-Mailer: Mutt 0.93i
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN


Hi,

I've been trying to figure out what suddenly went wrong with my
wu-ftpd 2.5.0 configuration.  I'm using a configuration where
some of my users (the internal ones) have /usr/local/ftp
as their home directory to which they are chrooted, and the
other users (the external customer accounts) are confined to
/usr/local/ftp/whoever.  The only place either set of users can
put files is /usr/local/ftp/whoever/to and /usr/local/ftp/whoever/from,
for various values of 'whoever'.  To get this to work well, I am
wanting all the files to be owned by ftpadm:ftpadm and
0660.

I have two class definitions, one 'cust' and one 'local'.

I have a defumask line like:

defumask        117

My upload lines look like:

upload class=local /usr/local/ftp / no
upload class=local /usr/local/ftp /* no
upload class=local /usr/local/ftp /*/to yes ftpadm ftpadm 0660
upload class=local /usr/local/ftp /*/from yes ftpadm ftpadm 0660
upload class=local /usr/local/ftp /*/* no

upload class=cust /usr/local/ftp/* / no
upload class=cust /usr/local/ftp/* /* no
upload class=cust /usr/local/ftp/* /*/to yes ftpadm ftpadm 0660
upload class=cust /usr/local/ftp/* /*/from yes ftpadm ftpadm 0660
upload class=cust /usr/local/ftp/* /*/* no

My 'local' class definition looks like:

class   local   guest   a.b.c.*

This is preceded by my 'cust' class definition.

Originally I had a 'cust' line like

class   cust    guest   x.x.x.x y.y.y.y x.w.y.z

And everything worked fine.  But the number of customer IP addressesd
was ballooning, and I wanted to freeze the ftpaccess file, rather than
risk mishaps.  SO I looked in the man page for ftpaccess and found that
I could replace the IP addresses with a filename.  SO now I have:

class   cust    guest   /etc/ftpcusthosts

And that file has one IP address on each line.

The problem is that now, although logins are restricted properly, the
upload stuff has gone all squiffy.  I appear to be relying on unix
permissions to restrict uploads, as when I try to upload into
/usr/local/ftp/whoever as a cust user, instead of seeing

553 file: Permission denied on server. (Upload)

I see

553 file: No such file or directory.

And when I upload a file into, say, the /usr/local/ftp/whoever/to
directory, the upload succeeds but the ownership and permissions
are wrong - the file is owned by the uploading user, and the
permissions are -rw-----w-.

I can't make 602 from 117 and 0660.  Can you?

If I replace the reference to a file in the 'local' class definition
with an IP address, all is back to normal.  But I don't want to do
that.  Help?

--
Susannah Gort, Senior Systems Administrator, Artisan Components, Inc.
--
You can ISO9001 certify the process of shooting yourself in the foot,
so long as the process is documented and reliably produces the proper
result. -- Adam Shostack

From [email protected]  Mon Jul 12 21:14:50 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id VAA15487
       for <[email protected]>; Mon, 12 Jul 1999 21:14:50 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id VAA09685;
       Mon, 12 Jul 1999 21:15:12 -0500 (CDT)
Received: from mail.vr.net ([email protected] [205.133.13.8])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id VAA03229
       for <[email protected]>; Mon, 12 Jul 1999 21:09:40 -0500 (CDT)
Received: (from lundberg@localhost)
       by mail.vr.net (8.9.3/8.9.3) id WAA22373;
       Mon, 12 Jul 1999 22:09:00 -0400
Message-Id: <[email protected]>
Date: Mon, 12 Jul 1999 22:09:00 -0400
Reply-To: Gregory A Lundberg <[email protected]>
Sender: [email protected]
From: Gregory A Lundberg <[email protected]>
To: "Thomas R. Kimpton" <[email protected]>
Cc: WU-FTPD Discussion List <[email protected]>
Subject: Re: using <class> with 'delete' keyword
In-Reply-To: <v04020a01b3afe977ca1c@[199.224.118.245]>; from Thomas R. Kimpton on Mon, Jul 12, 1999 at 03:04:34PM -0400
References: <v04020a01b3afe977ca1c@[199.224.118.245]>
Mime-Version: 1.0
Content-Type: multipart/signed; boundary=MfFXiAuoTsnnDAfZ; micalg=pgp-md5;
       protocol="application/pgp-signature"
X-Mailer: Mutt 0.95.6i
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN


--MfFXiAuoTsnnDAfZ
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable

On Mon, Jul 12, 1999 at 03:04:34PM -0400, Thomas R. Kimpton wrote:

> My intent is to allow anonymous login from within my domain, allowing
> them upload/download/delete permission on a global basis (global to the
> ftp root, that is), and restricted access to anonymous users outside of
> our domain with *no* delete permission.  I've got everything except
> delete working:
>=20
> class staff real *

I strongly recommend NOT allowing ANY real user access.  Make all your
'real' users guests.  It's more secure.

> class privilegedftp anonymous *.maned.com
> class privilegedftp anonymous 199.224.118.*
> class anonftp anonymous *

> delete yes real,class=3Dprivilegedftp
> delete no anonymous,guest

The default for real is 'yes' and for anonymous, 'no'.   You don't allow
any guest users (default: delete yes), so I'd only say:

 delete yes class=3Dprivilegedftp

This will probably solve your problem.  What's probably going on here is
the 'class=3D' clause stuff is far too simplistic.  I'm thinking that the
second delete clause matched and overrode the first; disabling delete for
your privilegedftp anonymous users.

> autogroup ftp privilegedftp

I assume the anonymous user, 'ftp', is already a member of the group
'ftp'.  If that is the case, this clause does nothing.

> upload /opt/home/anonftp * no
> upload class=3Dprivilegedftp /opt/home/anonftp * yes ftp ftp 0664 dirs
> upload /opt/home/anonftp /pub/upload yes ftpuser ftp 0440 nodirs

I assume the anonymous user, 'ftp', has a home directory entry (in
/etc/passwd) of /opt/home/anonyftp.  I usually like to state it exlicitly:

 anonymous-root /opt/home/anonftp

The default 'upload' for anonymous users is 'no'.  So the first clause has
no effect.

The second clause is probably WAY to loose.  Do you really want to give
privilegedftp anonymous users the ability to create directories to any
depth?  With the default permissions (usually 0777)?  With the default
ownership (probably ftp/ftp)?

In general, I question the concept that anonymous users should ever be
given the kind of latitude you're looking for.  I'd make a guest user who
has the privileges you want, and for the FTP maintainers to use that
username and password to gain the kind of access you're looking to grant.

--=20

Gregory A Lundberg              WU-FTPD Development Group
1441 Elmdale Drive              [email protected]
Kettering, OH 45409-1615 USA    1-800-809-2195

--MfFXiAuoTsnnDAfZ
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5

iQB1AwUBN4qRqA2nXFkJc83RAQEy8wL+OLU3hMscFydbiKLthRTofExyxZylOMNo
fvKMDmRMYYutBAAJfmdxvEFisxc8kU1G1u08esgsirZspUHTzEPXraYyeJpI4f5A
uH1F5LOP4tZIkdXL1MrEu1J5eivkVsvf
=Ye5p
-----END PGP SIGNATURE-----

--MfFXiAuoTsnnDAfZ--

From [email protected]  Mon Jul 12 21:34:01 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id VAA16380
       for <[email protected]>; Mon, 12 Jul 1999 21:34:00 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id VAA29199;
       Mon, 12 Jul 1999 21:34:25 -0500 (CDT)
Received: from mail.vr.net ([email protected] [205.133.13.8])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id VAA31943
       for <[email protected]>; Mon, 12 Jul 1999 21:32:59 -0500 (CDT)
Received: (from lundberg@localhost)
       by mail.vr.net (8.9.3/8.9.3) id WAA22558;
       Mon, 12 Jul 1999 22:32:31 -0400
Message-Id: <[email protected]>
Date: Mon, 12 Jul 1999 22:32:31 -0400
Reply-To: Gregory A Lundberg <[email protected]>
Sender: [email protected]
From: Gregory A Lundberg <[email protected]>
To: Susannah Gort <[email protected]>
Cc: WU-FTPD Discussion List <[email protected]>
Subject: Re: Problem w/upload clauses & files in class defn
In-Reply-To: <[email protected]>; from Susannah Gort on Mon, Jul 12, 1999 at 05:41:17PM -0700
References: <[email protected]>
Mime-Version: 1.0
Content-Type: multipart/signed; boundary=jCrbxBqMcLqd4mOl; micalg=pgp-md5;
       protocol="application/pgp-signature"
X-Mailer: Mutt 0.95.6i
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN


--jCrbxBqMcLqd4mOl
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable

On Mon, Jul 12, 1999 at 05:41:17PM -0700, Susannah Gort wrote:

> I've been trying to figure out what suddenly went wrong with my wu-ftpd
> 2.5.0 configuration.  I'm using a configuration where some of my users
> (the internal ones) have /usr/local/ftp as their home directory to which
> they are chrooted, and the other users (the external customer accounts)
> are confined to /usr/local/ftp/whoever.  The only place either set of
> users can put files is /usr/local/ftp/whoever/to and
> /usr/local/ftp/whoever/from, for various values of 'whoever'.  To get
> this to work well, I am wanting all the files to be owned by
> ftpadm:ftpadm and 0660.
>=20
> I have two class definitions, one 'cust' and one 'local'.
>=20
> I have a defumask line like:
>=20
> defumask 117
>=20
> My upload lines look like:
>=20
> upload class=3Dlocal /usr/local/ftp / no
> upload class=3Dlocal /usr/local/ftp /* no

What you probably mean here is

 upload class=3Dlocal /user/local/ftp * no

> upload class=3Dlocal /usr/local/ftp /*/to yes ftpadm ftpadm 0660
> upload class=3Dlocal /usr/local/ftp /*/from yes ftpadm ftpadm 0660
> upload class=3Dlocal /usr/local/ftp /*/* no

This last line has no effect.  The '/*' clause you used (or the better '*'
clause I suggest) will catch this case.

> upload class=3Dcust /usr/local/ftp/* / no
> upload class=3Dcust /usr/local/ftp/* /* no
> upload class=3Dcust /usr/local/ftp/* /*/to yes ftpadm ftpadm 0660
> upload class=3Dcust /usr/local/ftp/* /*/from yes ftpadm ftpadm 0660
> upload class=3Dcust /usr/local/ftp/* /*/* no

Given what you've said, I'd loose the 'class=3D' stuff.  It's not gaining y=
ou
anything.  Also, I'd add 'nodirs' to the end of the four 'yes' clauses.

> The problem is that now, although logins are restricted properly, the
> upload stuff has gone all squiffy.  I appear to be relying on unix
> permissions to restrict uploads, as when I try to upload into
> /usr/local/ftp/whoever as a cust user, instead of seeing=20

Probably something is keeping the users from matching the upload clauses.
Check that they really are being classed as you expect (ftpwho while
they're logged in will clue you).

> 553 file: Permission denied on server. (Upload)
>=20
> I see
>=20
> 553 file: No such file or directory.
>=20
> And when I upload a file into, say, the /usr/local/ftp/whoever/to
> directory, the upload succeeds but the ownership and permissions
> are wrong - the file is owned by the uploading user, and the=20
> permissions are -rw-----w-.
>=20
> I can't make 602 from 117 and 0660.  Can you?

117 is decimal.  That's 075 in mask terms.  0666 & ~0075 =3D> 0602.

You may whap your head.

> If I replace the reference to a file in the 'local' class definition with
> an IP address, all is back to normal.  But I don't want to do that.

Sounds like the file referenced from the class clause for 'local' class
isn't working.  I'd suggest:

Be sure you're running 2.5.0 (it looks like you are, but you might be
running some VR version).

Be sure you've installed the deny.not.nameserved patch from
 ftp://ftp.wu-ftpd.org/pub/wu-ftpd/quickfixes/apply_to_2.5.0

Make the changes I've suggested.

Test that the users are actually being classed as expected (ftpwho will
clue you).

--=20

Gregory A Lundberg              WU-FTPD Development Group
1441 Elmdale Drive              [email protected]
Kettering, OH 45409-1615 USA    1-800-809-2195

--jCrbxBqMcLqd4mOl
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5

iQB1AwUBN4qXJA2nXFkJc83RAQGMbQL/SieQqaaxRhEimKJ+aDMVn49JALbxrMbi
RZQEj1vzOXljOOCO9ijsuyeYrqrW+vnCxwGf7Hm3QIcg2Px//Kbw0OPXnKyUaGqH
KrsZnpr1D7eJe6HuKtFXSwv2FMvNsERu
=8+jg
-----END PGP SIGNATURE-----

--jCrbxBqMcLqd4mOl--

From [email protected]  Mon Jul 12 22:38:28 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id WAA18302
       for <[email protected]>; Mon, 12 Jul 1999 22:38:27 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id VAA10137;
       Mon, 12 Jul 1999 21:16:12 -0500 (CDT)
Received: from mail.vr.net ([email protected] [205.133.13.8])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id VAA28837
       for <[email protected]>; Mon, 12 Jul 1999 21:11:26 -0500 (CDT)
Received: (from lundberg@localhost)
       by mail.vr.net (8.9.3/8.9.3) id WAA22418;
       Mon, 12 Jul 1999 22:11:05 -0400
Message-Id: <[email protected]>
Date: Mon, 12 Jul 1999 22:11:04 -0400
Reply-To: Gregory A Lundberg <[email protected]>
Sender: [email protected]
From: Gregory A Lundberg <[email protected]>
To: "Durham, Kenneth J" <[email protected]>
Cc: WU-FTPD Discussion List <[email protected]>
Subject: Re: users root dir
In-Reply-To: <1BEE67ADF602D3119F9A0008C79174C70E8234@PETRIFIED>; from Durham, Kenneth J on Mon, Jul 12, 1999 at 12:25:22PM -0700
References: <1BEE67ADF602D3119F9A0008C79174C70E8234@PETRIFIED>
Mime-Version: 1.0
Content-Type: multipart/signed; boundary=kfjH4zxOES6UT95V; micalg=pgp-md5;
       protocol="application/pgp-signature"
X-Mailer: Mutt 0.95.6i
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN


--kfjH4zxOES6UT95V
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable

On Mon, Jul 12, 1999 at 12:25:22PM -0700, Durham, Kenneth J wrote:

> I have been trying to get my wu ftp to keep users in the home dir.  but i
> cant seem to get it right.  ive been looking for the documentation but it
> seems all the links are dead.  can someone please help me out.  thank you
> for your time

What do you mean 'all the links are dead'?

What you want is to upgrade to 2.5.0; make everyone a guest, chroot'd to a
common point (all my users are in /home/users so that's where I chroot them
to); then use restricted-uid to restrict all users to their homes.

The location of the latest version of wu-ftpd can be found in the=20
directory
=20
     ftp://ftp.wu-ftpd.org/pub/wu-ftpd/
=20
wu-ftpd Resource Center:  http://www.landfield.com/wu-ftpd/
wu-ftpd FAQ:              http://www.cetis.hvu.nl/~koos/wu-ftpd-faq.html
wu-ftpd list archive:     http://www.landfield.com/wu-ftpd/mail-archive/

--=20

Gregory A Lundberg              WU-FTPD Development Group
1441 Elmdale Drive              [email protected]
Kettering, OH 45409-1615 USA    1-800-809-2195

--kfjH4zxOES6UT95V
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5

iQB1AwUBN4qSJQ2nXFkJc83RAQEXbAMAl+2ePItzRvkd2Y3sAasdsX8cgAQq+URc
r7l8XPrhTWmdtnnASwFHLB+hcWkSkyP8Awnx3tOBOxTbMcm89Iw7ldbd6UqwjAfB
zgmPtFQQZu67+CLRxGRljQDgwV5kymgt
=QTUm
-----END PGP SIGNATURE-----

--kfjH4zxOES6UT95V--

From [email protected]  Tue Jul 13 13:13:45 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id NAA13125
       for <[email protected]>; Tue, 13 Jul 1999 13:13:44 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id NAA11291;
       Tue, 13 Jul 1999 13:12:17 -0500 (CDT)
Received: from correo.data.net.mx (correo.data.net.mx [200.13.16.5])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id NAA00515
       for <[email protected]>; Tue, 13 Jul 1999 13:07:43 -0500 (CDT)
Received: from maherr ([200.13.28.78]) by correo.data.net.mx
         (Post.Office MTA v3.5.2 release 221 ID# 0-56385U10000L10000S0V35)
         with SMTP id mx for <[email protected]>;
         Tue, 13 Jul 1999 13:08:22 -0500
Message-Id: <[email protected]>
Date: Tue, 13 Jul 1999 13:09:05
Reply-To: [email protected]
Sender: [email protected]
From: Mauricio Herrera <[email protected]>
To: [email protected]
Subject: Peer
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
X-Sender: [email protected]
X-Mailer: QUALCOMM Windows Eudora Light Version 3.0.6 (32)
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN

Hi all!!

Maybe this problem doesn't have a lot to do with FTP server, but I'm a
little lost. My users are getting this error frecuently:

Connection reseted by peer

I'm using Red Hat Linux 5.2 and WUFTP Server 2.4.2

Any tips on this?

Thanks!

Mauricio

From [email protected]  Tue Jul 13 15:32:43 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id PAA16095
       for <[email protected]>; Tue, 13 Jul 1999 15:32:42 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id PAA22696;
       Tue, 13 Jul 1999 15:31:53 -0500 (CDT)
Received: from mail.vr.net ([email protected] [205.133.13.8])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id PAA21708
       for <[email protected]>; Tue, 13 Jul 1999 15:26:52 -0500 (CDT)
Received: (from lundberg@localhost)
       by mail.vr.net (8.9.3/8.9.3) id QAA00460;
       Tue, 13 Jul 1999 16:26:38 -0400
Message-Id: <[email protected]>
Date: Tue, 13 Jul 1999 16:26:38 -0400
Reply-To: Gregory A Lundberg <[email protected]>
Sender: [email protected]
From: Gregory A Lundberg <[email protected]>
To: Mauricio Herrera <[email protected]>
Cc: [email protected]
Subject: Re: Peer
In-Reply-To: <[email protected]>; from Mauricio Herrera on Tue, Jul 13, 1999 at 01:09:05PM +0000
References: <[email protected]>
Mime-Version: 1.0
Content-Type: multipart/signed; boundary="z4+8/lEcDcG5Ke9S"; micalg=pgp-md5;
       protocol="application/pgp-signature"
X-Mailer: Mutt 0.95.6i
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN


--z4+8/lEcDcG5Ke9S
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable

On Tue, Jul 13, 1999 at 01:09:05PM +0000, Mauricio Herrera wrote:

> Maybe this problem doesn't have a lot to do with FTP server, but I'm a
> little lost. My users are getting this error frecuently:
>=20
> Connection reseted by peer
>=20
> I'm using Red Hat Linux 5.2 and WUFTP Server 2.4.2

I'd suggest upgrading to Redhat 6.0.  It probably won't help with the
connections being reset, but it will prevent a lot of other, more severe
problems.  Then upgrade the FTP server to the current Redhat version (which
will take you to WU-FTPD 2.5.0); you will need to download the RPM, the one
on the 6.0 CD is old.

Connection reset by peer means the remote side (from what you're saying,
the server) is resetting the TCP connection.  That generally means the
server does not think it should be talking to _you_ (or, "Why are you
talking to me?  We are not having a conversation.").

The most likely cause is that you're not really talking to the server.
Instead there's a proxy in the middle and the proxy is mis-configured,
buggy, does not properly speak FTP, or is flapping up and down.

Other things to look at include bad network interface cards, cables, hubs,
etc.

--=20

Gregory A Lundberg              WU-FTPD Development Group
1441 Elmdale Drive              [email protected]
Kettering, OH 45409-1615 USA    1-800-809-2195

--z4+8/lEcDcG5Ke9S
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5

iQB1AwUBN4uS6A2nXFkJc83RAQH9+wL9GkO0l003dZx4CD8jo7ulboJH1Q23CG/W
NzV6yKoeV++1iGfd6yqzmcYOKD1z2cGxymssVYK+caSr7pq4G1SqJ68uUBU3snI4
FW3xp48J5peEpVIwrrLouTPr5DpQ8Ly/
=f7gD
-----END PGP SIGNATURE-----

--z4+8/lEcDcG5Ke9S--

From [email protected]  Wed Jul 14 01:17:24 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id BAA24435
       for <[email protected]>; Wed, 14 Jul 1999 01:17:23 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id BAA17151;
       Wed, 14 Jul 1999 01:16:26 -0500 (CDT)
Received: from mail.asiagate.net (mail.asiagate.net [206.156.125.7])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id BAA06527
       for <[email protected]>; Wed, 14 Jul 1999 01:11:39 -0500 (CDT)
Received: from jwg (tech3.asiagate.net [206.156.125.196])
       by mail.asiagate.net (8.9.3/8.9.3) with SMTP id OAA12752
       for <[email protected]>; Wed, 14 Jul 1999 14:07:31 +0800
Message-Id: <[email protected]>
Date: Thu, 15 Jul 1999 02:17:52 +0800
Reply-To: [email protected]
Sender: [email protected]
From: "Joseph Aninias" <[email protected]>
To: <[email protected]>
Subject: ftpaccess
MIME-Version: 1.0
Content-Type: multipart/alternative;
       boundary="----=_NextPart_000_002A_01BECE68.3E517900"
X-Priority: 1
X-MSMail-Priority: High
X-Mailer: Microsoft Outlook Express 4.72.3110.1
X-MimeOLE: Produced By Microsoft MimeOLE V4.72.3110.3
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN

This is a multi-part message in MIME format.

------=_NextPart_000_002A_01BECE68.3E517900
Content-Type: text/plain;
       charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

We setup some users' account allowing to ftp to their own /home/usr=20
dirs. Following ftpaccess man pages, I put those users in an ftponly=20
group and use the ftpaccess sample file. When logging, the restriction=20
works however "dir" or "ls" does not display the files...
=20
does anyone figured it out yet?
=20
in need of advice
Thanks!

------=_NextPart_000_002A_01BECE68.3E517900
Content-Type: text/html;
       charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD W3 HTML//EN">
<HTML>
<HEAD>

<META content=3Dtext/html;charset=3Diso-8859-1 =
http-equiv=3DContent-Type>
<META content=3D'"MSHTML 4.72.3110.7"' name=3DGENERATOR>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV>
<DIV><FONT color=3D#000000 size=3D2>We setup some users' account =
allowing to ftp to=20
their own /home/usr <BR>dirs. Following ftpaccess man pages, I put those =
users=20
in an ftponly <BR>group and use the ftpaccess sample file. When logging, =
the=20
restriction <BR>works however &quot;dir&quot; or &quot;ls&quot; does not =
display=20
the files...</FONT></DIV>
<DIV><FONT color=3D#000000 =
size=3D2><EM><STRONG></STRONG></EM></FONT>&nbsp;</DIV>
<DIV><FONT size=3D2>does anyone figured it out yet?</FONT></DIV>
<DIV><FONT size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT size=3D2>in need of advice</FONT></DIV>
<DIV><FONT size=3D2>Thanks!</FONT></DIV></DIV></BODY></HTML>

------=_NextPart_000_002A_01BECE68.3E517900--


From [email protected]  Wed Jul 14 09:30:13 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id JAA00848
       for <[email protected]>; Wed, 14 Jul 1999 09:30:12 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id JAA19568;
       Wed, 14 Jul 1999 09:29:10 -0500 (CDT)
Received: from peer.guj.de (peer.guj.de [193.7.250.57])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id JAA02135
       for <[email protected]>; Wed, 14 Jul 1999 09:27:23 -0500 (CDT)
Received: by ngjexc11.zd.guj.de with Internet Mail Service (5.5.2448.0)
       id <371X4FR7>; Wed, 14 Jul 1999 16:26:50 +0200
Message-Id: <[email protected]>
Date: Wed, 14 Jul 1999 16:26:50 +0200
Reply-To: [email protected]
Sender: [email protected]
From: gc_team28 <[email protected]>
To: WU-FTP MailingList <[email protected]>
Subject: Do I realy need the passwd- and the group-file ?
MIME-Version: 1.0
Content-Type: text/plain;
       charset="iso-8859-1"
Content-Transfer-Encoding: 8bit
X-Mailer: Internet Mail Service (5.5.2448.0)
X-MIME-Autoconverted: from quoted-printable to 8bit by wugate.wustl.edu id JAA17796
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN

Hi!

I have just finished a shell script, that adds a new user to my ftp-group.
After i have tested it for serveral times on a seperate computer, i
recognized, that i didn't change the etc/passwd and etc/group files in
the guests root-directory. So, i tried to log in from another computer
and...surprise..it worked!!

My question is: Why do i need these files?

Andre L�pke


From [email protected]  Wed Jul 14 10:01:13 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id KAA01744
       for <[email protected]>; Wed, 14 Jul 1999 10:01:12 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id KAA03323;
       Wed, 14 Jul 1999 10:01:40 -0500 (CDT)
Received: from mail.vr.net ([email protected] [205.133.13.8])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id JAA13771
       for <[email protected]>; Wed, 14 Jul 1999 09:54:13 -0500 (CDT)
Received: (from lundberg@localhost)
       by mail.vr.net (8.9.3/8.9.3) id KAA09958;
       Wed, 14 Jul 1999 10:53:37 -0400
Message-Id: <[email protected]>
Date: Wed, 14 Jul 1999 10:53:36 -0400
Reply-To: Gregory A Lundberg <[email protected]>
Sender: [email protected]
From: Gregory A Lundberg <[email protected]>
To: "Mordani, Ritesh" <[email protected]>,
       Joseph Aninias <[email protected]>
Cc: WU-FTPD Questions <[email protected]>,
       WU-FTPD Discussion List <[email protected]>
Subject: Re: anonymous user & ls comand on HP 11
In-Reply-To: <D104150098E6D111B7830000F8D90AE8E975BB@exna02.securitydynamics.com>; from Mordani, Ritesh on Tue, Jul 13, 1999 at 05:00:05PM -0400
References: <D104150098E6D111B7830000F8D90AE8E975BB@exna02.securitydynamics.com>
Mime-Version: 1.0
Content-Type: multipart/signed; boundary="5mCyUwZo2JvN/JJP"; micalg=pgp-md5;
       protocol="application/pgp-signature"
X-Mailer: Mutt 0.95.6i
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN


--5mCyUwZo2JvN/JJP
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable

On Tue, Jul 13, 1999 at 05:00:05PM -0400, Mordani, Ritesh wrote:

> for the anonymous user the ls command says=20
> 200 PORT command successful
> 150 Opening ASCII mode data connection for /bin/ls.
> 226 Transfer complete.
>=20
> but no listing of files or directories -- this occurs on HP 11
> all other commands work fine (put, get, mkdir ..etc)

On Thu, Jul 15, 1999 at 02:17:52AM +0800, Joseph Aninias wrote:

> We setup some users' account allowing to ftp to their own /home/usr dirs.
> Following ftpaccess man pages, I put those users in an ftponly group and
> use the ftpaccess sample file. When logging, the restriction works
> however "dir" or "ls" does not display the files...

This is a FAQ.

The location of the latest version of wu-ftpd can be found in the=20
directory
=20
     ftp://ftp.wu-ftpd.org/pub/wu-ftpd/
=20
wu-ftpd Resource Center:  http://www.landfield.com/wu-ftpd/
wu-ftpd FAQ:              http://www.cetis.hvu.nl/~koos/wu-ftpd-faq.html
wu-ftpd list archive:     http://www.landfield.com/wu-ftpd/mail-archive/

--=20

Gregory A Lundberg              WU-FTPD Development Group
1441 Elmdale Drive              [email protected]
Kettering, OH 45409-1615 USA    1-800-809-2195

--5mCyUwZo2JvN/JJP
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5

iQB1AwUBN4yWWg2nXFkJc83RAQFJ4gL/Q+4EXjY/CnfmSO2cCK5dOuk8e6fsPOZP
qWmm1b5+r+AhlyPQ+q3/XDWYAVGcu/m8mH8+aIM6TbAZXjnUH7b7Mr4EEl75pU1k
maYy1czT0PcpOybsMTY8RT3QLxOBILcI
=Y8jF
-----END PGP SIGNATURE-----

--5mCyUwZo2JvN/JJP--

From [email protected]  Wed Jul 14 10:08:16 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id KAA01974
       for <[email protected]>; Wed, 14 Jul 1999 10:08:15 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id KAA22906;
       Wed, 14 Jul 1999 10:07:30 -0500 (CDT)
Received: from mail.vr.net ([email protected] [205.133.13.8])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id KAA12897
       for <[email protected]>; Wed, 14 Jul 1999 10:05:28 -0500 (CDT)
Received: (from lundberg@localhost)
       by mail.vr.net (8.9.3/8.9.3) id LAA10093;
       Wed, 14 Jul 1999 11:05:19 -0400
Message-Id: <[email protected]>
Date: Wed, 14 Jul 1999 11:05:18 -0400
Reply-To: Gregory A Lundberg <[email protected]>
Sender: [email protected]
From: Gregory A Lundberg <[email protected]>
To: gc_team28 <[email protected]>
Cc: WU-FTPD Discussion List <[email protected]>
Subject: Re: Do I realy need the passwd- and the group-file ?
In-Reply-To: <[email protected]>; from gc_team28 on Wed, Jul 14, 1999 at 04:26:50PM +0200
References: <[email protected]>
Mime-Version: 1.0
Content-Type: multipart/signed; boundary=VbJkn9YxBvnuCH5J; micalg=pgp-md5;
       protocol="application/pgp-signature"
X-Mailer: Mutt 0.95.6i
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN


--VbJkn9YxBvnuCH5J
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable

On Wed, Jul 14, 1999 at 04:26:50PM +0200, gc_team28 wrote:

> I have just finished a shell script, that adds a new user to my
> ftp-group.  After i have tested it for serveral times on a seperate
> computer, i recognized, that i didn't change the etc/passwd and etc/group
> files in the guests root-directory. So, i tried to log in from another
> computer and...surprise..it worked!!
>=20
> My question is: Why do i need these files?

For all versions of WU-FTPD:

 * The local etc/passwd and etc/group files are used by the 'ls' program
   to give user and group names to the ID numbers.

For version 2.5.0 of WU-FTPD:

 * Bugs in earlier versions of the daemon have been corrected so 'cd ~'
   and 'cd ~username' work as expected.  For 'cd ~username' the daemon
   uses the local etc/passwd file to locate the given user's home director=
y.

 * If you use the anonymous-root and/or guest-root clause the user's home
   directory is *NOT* taken from the system /etc/passwd file.  Instead,
   the user is initially changed to their home directory listed in the
   local etc/passwd file.

 * If you use guest-root AND restricted-uid, the daemon uses the local
   etc/passwd home directory entry to determine which directory the user
   is restricted to.

Can you run without the local etc/passwd and etc/group files?  Yes.  But
you will not be able to use , or will have problems using, the ~ filename
globbing feature, anonymous-root, guest-root or restricted-uid.

There may be other uses of these files, and other problems associated with
not having them; this answer is from my memory andI may have forgotten
something.

--=20

Gregory A Lundberg              WU-FTPD Development Group
1441 Elmdale Drive              [email protected]
Kettering, OH 45409-1615 USA    1-800-809-2195

--VbJkn9YxBvnuCH5J
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5

iQB1AwUBN4yZFg2nXFkJc83RAQGL7wMAv+lj6sdUQbK819PFdS1/t5FEe+MBDewJ
zfT2yPbRrdFXBVrpcHJZPTTph09YYp16Nn7By4N9XnIQcG1m+TFgeGFSllNvsra3
JhXpI2Cfo2fIDGOXdp0jsC3icKsaHEcE
=4Y8r
-----END PGP SIGNATURE-----

--VbJkn9YxBvnuCH5J--

From [email protected]  Wed Jul 14 10:20:36 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id KAA02429
       for <[email protected]>; Wed, 14 Jul 1999 10:20:35 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id KAA23314;
       Wed, 14 Jul 1999 10:21:00 -0500 (CDT)
Received: from zam107.zam.kfa-juelich.de (zam107.zam.kfa-juelich.de [134.94.169.64])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id KAA18154
       for <[email protected]>; Wed, 14 Jul 1999 10:18:58 -0500 (CDT)
Received: (from zdv045@localhost) by zam107.zam.kfa-juelich.de (AIX4.3/UCB 8.8.8/8.8.8) id RAA40556 for [email protected]; Wed, 14 Jul 1999 17:18:54 +0200
Message-Id: <[email protected]>
Date: Wed, 14 Jul 1999 17:18:43 +0000
Reply-To: [email protected]
Sender: [email protected]
From: [email protected]
To: [email protected]
Subject: Does wu-ftp support DCE?
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
X-Mailer: Z-Mail (4.0.1 13Jan97)
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN

Hello all,

I installed wu-ftp 2.5.0 on AIX 4.3. wu-ftp should replace normal ftp function
plus addon of anonymous ftp service. All works besides the authentication
of DCE users on that machine.

With other words a normal ftp session to a DCE user on that system fails with:
 Name (aix:zdv045):
 331 Password required for zdv045.
 Password:
 530 Login incorrect.
 Login failed.
For non DCE users in the normal Unix shadow password table login is OK.

Has someone experience with this?

Greetings

--
Mit freundlichen Gruessen
Ulrike Schmidt

+----------------------------------------------------------------------+
| Ulrike Schmidt                                                       |
| Zentralinstitut fuer Angewandte Mathematik                           |
| Forschungszentrum Juelich GmbH                                       |
| D-52425 Juelich                                                      |
|                                           Phone: +49 02461 61-6577   |
| Email: [email protected]            Fax:   +49 02461 61-6656   |
+----------------------------------------------------------------------+

From [email protected]  Wed Jul 14 10:32:53 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id KAA02704
       for <[email protected]>; Wed, 14 Jul 1999 10:32:52 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id KAA24049;
       Wed, 14 Jul 1999 10:33:19 -0500 (CDT)
Received: from winonacc01.lbsna.com (lucas-body-system-na.WillowSprings.cw.net [166.48.32.86])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id KAA16693
       for <[email protected]>; Wed, 14 Jul 1999 10:30:21 -0500 (CDT)
Received: by WinonaCC01 with Internet Mail Service (5.5.2448.0)
       id <3Z4SJ24V>; Wed, 14 Jul 1999 10:27:13 -0500
Message-Id: <C051872F12B3D2118DF300805FEDF3E5C1BAE1@WinonaCC01>
Date: Wed, 14 Jul 1999 10:26:31 -0500
Reply-To: [email protected]
Sender: [email protected]
From: "Shimek, Kirk" <[email protected]>
To: "'[email protected]'" <[email protected]>
Subject: Non-Anonymous Setup Problems
MIME-Version: 1.0
Content-Type: text/plain
X-Mailer: Internet Mail Service (5.5.2448.0)
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN

Okay Everyone.  I know I'm new to this but I cannot be that brain
dead . . . can I?

First off I'm using an "ftpd" not compiled on my system because I cannot get
gcc to work and
the company is on a budget freeze so I bummed it from a nice wu-listee.
Anyway . . .
I've followed the setup instructions from Glenn Fleishman's "Setting up
wuftpd for Non-
Anonymous Accounts".  I have the following configuration;

/home/ftp set as the chroot or root directory for my ftp users.
Under this I have a directory called "abc" and a directory called
"incoming".  The "abc" directory
is owned by a login name called "abc" and the incoming directory is for all
uploads from remote
users.  I think I followed the instructions correctly from
WU-ftpd-upload.HOWTO . . .
I've also created with correct permissions, the "/etc/shells" file as this
was listed as a potential
problem from one of the archived e-mails and other FAQs.

The abc user gets the standard "login incorrect" "or access denied" when
using either a DOS
prompt login or I.E. browser logon attempt. Any suggestions / ideas are
GREATLY appreciated

Kirk Shimek

From [email protected]  Wed Jul 14 10:52:16 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id KAA03165
       for <[email protected]>; Wed, 14 Jul 1999 10:52:14 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id KAA16218;
       Wed, 14 Jul 1999 10:52:20 -0500 (CDT)
Received: from mail.vr.net ([email protected] [205.133.13.8])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id KAA32284
       for <[email protected]>; Wed, 14 Jul 1999 10:47:25 -0500 (CDT)
Received: (from lundberg@localhost)
       by mail.vr.net (8.9.3/8.9.3) id LAA10449;
       Wed, 14 Jul 1999 11:47:22 -0400
Message-Id: <[email protected]>
Date: Wed, 14 Jul 1999 11:47:21 -0400
Reply-To: Gregory A Lundberg <[email protected]>
Sender: [email protected]
From: Gregory A Lundberg <[email protected]>
To: "Shimek, Kirk" <[email protected]>
Cc: WU-FTPD Discussion List <[email protected]>
Subject: Re: Non-Anonymous Setup Problems
In-Reply-To: <C051872F12B3D2118DF300805FEDF3E5C1BAE1@WinonaCC01>; from Shimek, Kirk on Wed, Jul 14, 1999 at 10:26:31AM -0500
References: <C051872F12B3D2118DF300805FEDF3E5C1BAE1@WinonaCC01>
Mime-Version: 1.0
Content-Type: multipart/signed; boundary="0hHDr/TIsw4o3iPK"; micalg=pgp-md5;
       protocol="application/pgp-signature"
X-Mailer: Mutt 0.95.6i
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN


--0hHDr/TIsw4o3iPK
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable

On Wed, Jul 14, 1999 at 10:26:31AM -0500, Shimek, Kirk wrote:

> Okay Everyone.  I know I'm new to this but I cannot be that brain dead .
> . . can I?

Why not?  The rest of us are :P

> First off I'm using an "ftpd" not compiled on my system because I cannot
> get gcc to work and the company is on a budget freeze so I bummed it from
> a nice wu-listee.

> I've followed the setup instructions from Glenn Fleishman's "Setting up
> wuftpd for Non- Anonymous Accounts".  I have the following configuration;

I heard about that page yesterday, it's a good pedestrian howto, but is out
of date and has some technical inaccuracies (especially for non-Linux
users).

> /home/ftp set as the chroot or root directory for my ftp users.

> Under this I have a directory called "abc" and a directory called
> "incoming".  The "abc" directory is owned by a login name called "abc"
> and the incoming directory is for all uploads from remote users.  I think
> I followed the instructions correctly from WU-ftpd-upload.HOWTO . . .

Say what?  Do you mean the upload.configuration.HOWTO?

> I've also created with correct permissions, the "/etc/shells" file as
> this was listed as a potential problem from one of the archived e-mails
> and other FAQs.
>=20
> The abc user gets the standard "login incorrect" "or access denied" when
> using either a DOS prompt login or I.E. browser logon attempt. Any
> suggestions / ideas are GREATLY appreciated

What is the exact text of the error .. wait a minute, I just posted this
same thing for someone else.  Go back a message and read my response.

--=20

Gregory A Lundberg              WU-FTPD Development Group
1441 Elmdale Drive              [email protected]
Kettering, OH 45409-1615 USA    1-800-809-2195

--0hHDr/TIsw4o3iPK
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5

iQB1AwUBN4yi9Q2nXFkJc83RAQFpaAMAqEA/O4/qBNUwaqmtlQOxuvHU6TVDDjUn
g6HOnHvsWTCVkemrQJF5grixSobUhTadccraU242xSPi+5SlxjrT793l8hH5XWpx
Hoe2gZpOK8av8xXHYKVKPtXkpjYH5kp1
=T8Wr
-----END PGP SIGNATURE-----

--0hHDr/TIsw4o3iPK--

From [email protected]  Wed Jul 14 11:17:48 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id LAA03949
       for <[email protected]>; Wed, 14 Jul 1999 11:17:46 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id LAA00179;
       Wed, 14 Jul 1999 11:18:01 -0500 (CDT)
Received: from winonacc01.lbsna.com (lucas-body-system-na.WillowSprings.cw.net [166.48.32.86])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id LAA06862
       for <[email protected]>; Wed, 14 Jul 1999 11:13:00 -0500 (CDT)
Received: by WinonaCC01 with Internet Mail Service (5.5.2448.0)
       id <3Z4SJ25M>; Wed, 14 Jul 1999 11:09:52 -0500
Message-Id: <C051872F12B3D2118DF300805FEDF3E5C1BAE2@WinonaCC01>
Date: Wed, 14 Jul 1999 11:09:34 -0500
Reply-To: [email protected]
Sender: [email protected]
From: "Shimek, Kirk" <[email protected]>
To: "'Gregory A Lundberg'" <[email protected]>
Cc: WU-FTPD Discussion List <[email protected]>
Subject: RE: Non-Anonymous Setup Problems
MIME-Version: 1.0
Content-Type: text/plain
X-Mailer: Internet Mail Service (5.5.2448.0)
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN

> I've followed the setup instructions from Glenn Fleishman's "Setting up
> wuftpd for Non- Anonymous Accounts".  I have the following configuration;

I heard about that page yesterday, it's a good pedestrian howto, but is out
of date and has some technical inaccuracies (especially for non-Linux
users).

> Say what?  Do you mean the upload.configuration.HOWTO?

YES - to the upload.configuration.HOWTO?

>What is the exact text of the error .. wait a minute, I just posted this
>same thing for someone else.  Go back a message and read my response.

>From a DOS prompt it is the "530 login incorrect / login failed"
>From the I.E.4 browser "Internet Explorer cannot open Internet site ftp://
149.223.100.101/abc/.  The login request was denied"

Again I'm on AIX 4.3.2,  2.5.0 wu-ftpd  and yes at the DOS prompt attempt
the Banner does read "220 ftp FTP server <Version wu-2.5.0(1) Ready" so
the ftp server is the wu-ftp server.

BTW - I laughed so hard from your first comment back to me. . . THANKS
you broke up my day - really needed that.

Kirk Shimek

From [email protected]  Wed Jul 14 11:56:34 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id LAA04945
       for <[email protected]>; Wed, 14 Jul 1999 11:56:33 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id LAA01754;
       Wed, 14 Jul 1999 11:56:55 -0500 (CDT)
Received: from plmail.parceline.co.uk ([195.224.86.68])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id LAA24687
       for <[email protected]>; Wed, 14 Jul 1999 11:53:05 -0500 (CDT)
Received: from [192.9.200.85] by plmail.parceline.co.uk
(Sun Internet Mail Server sims.3.5.1998.08.08.00.06)
with ESMTP id <[email protected]> for
[email protected]; Wed, 14 Jul 1999 17:49:06 +0100 (BST)
Message-Id: <[email protected]>
Date: Wed, 14 Jul 1999 17:52:46 +0100
Reply-To: [email protected]
Sender: [email protected]
From: Mukund Rajyaguru <[email protected]>
To: [email protected], WU-FTP MailingList <[email protected]>
Subject: Re: Do I realy need the passwd- and the group-file ?
MIME-version: 1.0
Content-type: text/plain; charset="ISO-8859-1"
Content-Transfer-Encoding: 8bit
X-Mailer: Microsoft Outlook Express for Macintosh - 4.01 (295)
X-Priority: 3
X-MIME-Autoconverted: from quoted-printable to 8bit by wugate.wustl.edu id LAA06383
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN

>From: gc_team28 <[email protected]>
>To: WU-FTP MailingList <[email protected]>
>Subject: Do I realy need the passwd- and the group-file ?
>Date: Wed, Jul 14, 1999, 3:26 pm
>

>Hi!
>
>I have just finished a shell script, that adds a new user to my ftp-group.
>After i have tested it for serveral times on a seperate computer, i
>recognized, that i didn't change the etc/passwd and etc/group files in
>the guests root-directory. So, i tried to log in from another computer
>and...surprise..it worked!!
>
>My question is: Why do i need these files?
>
>Andre L�pke
>

This is only a theory of mine but the file /etc/passwd is used once you
chroot to give you more information when you do an ls -l. If the file os not
correct you will probably get UID numbers and GID numbers.


thankyou

Regards
Mukund Rajyaguru ( Unix Support Techincian)


E-Mail: [email protected]

From [email protected]  Wed Jul 14 12:54:58 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id MAA06259
       for <[email protected]>; Wed, 14 Jul 1999 12:54:57 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id MAA24603;
       Wed, 14 Jul 1999 12:55:19 -0500 (CDT)
Received: from castor.ipac.caltech.edu (ipac.caltech.edu [131.215.11.35])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id MAA25994
       for <[email protected]>; Wed, 14 Jul 1999 12:49:57 -0500 (CDT)
Received: from light (light.ipac.caltech.edu [134.4.40.84])
         by castor.ipac.caltech.edu (8.8.8/8.6.4)
         with ESMTP id KAA02394; Wed, 14 Jul 1999 10:49:56 -0700 (PDT)
Received: (jrl@localhost) by light (SMI-8.6/8.6.4) id KAA07398; Wed, 14 Jul 1999 10:49:55 -0700
Message-Id: <199907141749.KAA07398@light>
Date: Wed, 14 Jul 1999 10:49:55 -0700
Reply-To: [email protected]
Sender: [email protected]
From: Jack Lampley <[email protected]>
To: [email protected]
Cc: [email protected]
Subject: Continuing problem with linked dirs in ftp file structure
X-Sun-Charset: US-ASCII
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN


I wrote the following message earlier about problems with linked directories in ftp
file structure:

I have been running the following version of ftp on a sparc 20 running Solaris 5.6.

FTP server (Version wu-2.4.2-academ[BETA-14]

I have added 2 new 34 gig disks to give more disk space. The disks were added
under /data/anon-ftp as links to the new partitions. When I ftp in and try to
cd to the new partitions I get the following error:

ftp> cd 2mass
550 2mass: Number of symbolic links encountered during path name traversal exceeds MAXSYMLINKS.

Can someone tell me if it is possible to use symbolic links within the ftp file
structure as I need to do. Is it just a matter of adding a line like MAXSYMLINKS =
1 or 2 into the ftpaccess file or somewhere?


I got rid of that problem by moving the links down a level and now when I try to cd within
ftp to one of them I get:

No such file or directory

Any suggestions?

Thanks,

Jack Lampley, System Administrator
Infrared Processing and Analysis Center (IPAC)
California Institute of Technology (CalTech)
MS 100/22, Pasadena, CA 91125

Telephone : 818-397-9551
Internet  : [email protected]

From [email protected]  Wed Jul 14 13:34:19 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id NAA07044
       for <[email protected]>; Wed, 14 Jul 1999 13:34:18 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id NAA10025;
       Wed, 14 Jul 1999 13:34:24 -0500 (CDT)
Received: from mail.vr.net ([email protected] [205.133.13.8])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id NAA21175
       for <[email protected]>; Wed, 14 Jul 1999 13:31:08 -0500 (CDT)
Received: (from lundberg@localhost)
       by mail.vr.net (8.9.3/8.9.3) id OAA12107;
       Wed, 14 Jul 1999 14:31:04 -0400
Message-Id: <[email protected]>
Date: Wed, 14 Jul 1999 14:31:04 -0400
Reply-To: Gregory A Lundberg <[email protected]>
Sender: [email protected]
From: Gregory A Lundberg <[email protected]>
To: Jack Lampley <[email protected]>
Cc: [email protected]
Subject: Re: Continuing problem with linked dirs in ftp file structure
In-Reply-To: <199907141749.KAA07398@light>; from Jack Lampley on Wed, Jul 14, 1999 at 10:49:55AM -0700
References: <199907141749.KAA07398@light>
Mime-Version: 1.0
Content-Type: multipart/signed; boundary=azLHFNyN32YCQGCU; micalg=pgp-md5;
       protocol="application/pgp-signature"
X-Mailer: Mutt 0.95.6i
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN


--azLHFNyN32YCQGCU
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable

On Wed, Jul 14, 1999 at 10:49:55AM -0700, Jack Lampley wrote:

> I have been running the following version of ftp on a sparc 20 running So=
laris 5.6.
>=20
> FTP server (Version wu-2.4.2-academ[BETA-14]

you need to upgrade to version 2.5.0 .. it won't help with your problem but
it will prevent your system being broken into using the currently-active
exploits against your OS and the version of the daemon you are running.

> I have added 2 new 34 gig disks to give more disk space. The disks were
> added under /data/anon-ftp as links to the new partitions. When I ftp in
> and try to cd to the new partitions I get the following error:
>=20
> ftp> cd 2mass
> 550 2mass: Number of symbolic links encountered during path name traversa=
l exceeds MAXSYMLINKS.
>=20
> I got rid of that problem by moving the links down a level and now when I
> try to cd within ftp to one of them I get:
>=20
> No such file or directory

Just that?  On the client side?  No numbers in front of it?  Then it's a
client-side error and has nothing to do with the server.

If there are numbers in front of the message, it came from the daemon.
Check the symlinks to be sure they are correct FROM THE POINT OF VIEW OF
THE ANONYMOUS USER.  'ls' won't do.  You need to chroot THEN do an 'ls'.

 su
 cd ~ftp
 chroot ~ftp /bin/ls -alR

or something similar.  bet you see a link which points to somewhere which
does not exist FROM THE POINT OF VIEW OF THE ANONYMOUS FTP USER.  For
instance:

 su
 cd ~ftp
 ln -s /tmp tmp

will produce a symlink which is fine for shell users but points to a
non-existent file/directory when viewed using FTP.

--=20

Gregory A Lundberg              WU-FTPD Development Group
1441 Elmdale Drive              [email protected]
Kettering, OH 45409-1615 USA    1-800-809-2195

--azLHFNyN32YCQGCU
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5

iQB1AwUBN4zJUg2nXFkJc83RAQETbgMAi96jJwD2E+9sm4/LfmG371xL6gSQ4NdF
arrf+qknaJAEVyP+hGWX1uAgjFfAeKG6NzluH+Vu5XtLvW5RzszkPjqFIxxLOkTq
A5Af7bcxSv62hW6RZGy4iiAr4OXwtmBQ
=O4g4
-----END PGP SIGNATURE-----

--azLHFNyN32YCQGCU--

From [email protected]  Thu Jul 15 01:57:13 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id BAA03668
       for <[email protected]>; Thu, 15 Jul 1999 01:57:12 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id BAA31655;
       Thu, 15 Jul 1999 01:56:05 -0500 (CDT)
Received: from d06lmsgate.emea.ibm.com (d06lmsgate.uk.ibm.com [195.212.29.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id BAA17440
       for <[email protected]>; Thu, 15 Jul 1999 01:49:16 -0500 (CDT)
Received: from d06relay02.portsmouth.uk.ibm.com (d06relay02.portsmouth.uk.ibm.com [9.166.84.148])
       by d06lmsgate.emea.ibm.com (1.0.0) with ESMTP id HAA139190
       for <[email protected]>; Thu, 15 Jul 1999 07:43:51 +0100
Received: from d06mta03.portsmouth.uk.ibm.com (d06mta03_cs0 [9.180.35.1])
       by d06relay02.portsmouth.uk.ibm.com (8.8.8m2/NCO v2.03) with SMTP id HAA60076
       for <[email protected]>; Thu, 15 Jul 1999 07:48:43 +0100
Received: by d06mta03.portsmouth.uk.ibm.com(Lotus SMTP MTA Internal build v4.6.2  (651.2 6-10-1998))  id 802567AF.00256A31 ; Thu, 15 Jul 1999 07:48:40 +0100
Message-Id: <[email protected]>
Date: Thu, 15 Jul 1999 08:48:34 +0200
Reply-To: [email protected]
Sender: [email protected]
From: [email protected]
To: [email protected]
Subject: Can't build data connection
Mime-Version: 1.0
Content-type: text/plain; charset=us-ascii
Content-Disposition: inline
X-Lotus-FromDomain: IBMES@IBMGB
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN



Hello all !!!

    I'm just new to this, so excuse me for my faults in advance.
    I'm running Version wu-2.4.2-academ[BETA-18] on AIX 4.2.1, I've got
the same configuration files which ran on BETA 15 just fine.
    When making a connection, I can login but when trying x-transfering or
just make an ls, I get the next error:

    500 Illegal PORT Command
    500 Can't build data connection: no PORT specified

    I think it's a compilation problem, but I've been once and again over
the compilation and see everything OK, has anybody the same problem or
someone similar ???

    Thanks a lot

Juan Alberto Agudo Huertas.

Jagudo.
---------------------------------------------



From [email protected]  Thu Jul 15 02:45:51 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id CAA03830
       for <[email protected]>; Thu, 15 Jul 1999 02:45:51 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id CAA31907;
       Thu, 15 Jul 1999 02:46:18 -0500 (CDT)
Received: from perdita.zdv.Uni-Mainz.de (perdita.zdv.Uni-Mainz.DE [134.93.179.147])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id CAA30888
       for <[email protected]>; Thu, 15 Jul 1999 02:42:41 -0500 (CDT)
Received: (from schoepf@localhost)
       by perdita.zdv.Uni-Mainz.de (8.8.8/8.8.8) id JAA02492;
       Thu, 15 Jul 1999 09:41:53 +0200 (MEST)
Message-Id: <[email protected]>
Date: Thu, 15 Jul 1999 09:41:51 +0200 (MEST)
Reply-To: [email protected]
Sender: [email protected]
From: Rainer Schoepf <[email protected]>
To: [email protected]
Cc: [email protected], [email protected]
Subject: Re: Does wu-ftp support DCE?
In-Reply-To: <[email protected]>
References: <[email protected]>
MIME-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: 8bit
X-Mailer: VM 6.62 under Emacs 19.34.1
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN

[email protected] writes:

> I installed wu-ftp 2.5.0 on AIX 4.3. wu-ftp should replace normal ftp function
> plus addon of anonymous ftp service. All works besides the authentication
> of DCE users on that machine.
>
> With other words a normal ftp session to a DCE user on that system fails with:
>   Name (aix:zdv045):
>   331 Password required for zdv045.
>   Password:
>   530 Login incorrect.
>   Login failed.
> For non DCE users in the normal Unix shadow password table login is OK.
>
> Has someone experience with this?

Appended are patches for wu-ftpd-2.4.2-vr16 to authenticate against
AFS and/or DCE. Note that I never really tested DCE alone, without
AFS, so there might be some problems. Just replace -DAFS_AUTH by
-DDCE_AUTH and ${LAFS} by -ldce in the Makefile.


--
  Rainer Sch�pf
  Zentrum f�r Datenverarbeitung           A point of view can be a dangerous
   der Universit�t Mainz                  luxury when substituted for insight
  Anselm-Franz-von-Bentzel-Weg 12         and understanding.
  D-55099 Mainz
  Germany                                  Herbert Marshall McLuhan:
  <[email protected]>                          The Gutenberg Galaxy


===================================================================
RCS file: RCS/ftpd.c,v
retrieving revision 1.1
diff -c -r1.1 ftpd.c
*** 1.1 1999/03/09 15:47:43
--- ftpd.c      1999/03/10 11:24:57
***************
*** 150,155 ****
--- 150,167 ----
 #define lstat stat
 #endif

+ #ifdef AFS_AUTH
+ #include <afs/stds.h>
+ #include <afs/kautils.h>
+ #endif
+
+ #ifdef DCE_AUTH
+ #include <dce/rpc.h>
+ #include <dce/sec_login.h>
+ #include <dce/dce_error.h>
+ #endif
+
+
 #ifdef HAVE_DIRENT
 #include <dirent.h>
 #else
***************
*** 2279,2284 ****
--- 2291,2309 ----
 #ifdef ULTRIX_AUTH
     int numfails;
 #endif /* ULTRIX_AUTH */
+
+ #ifdef AFS_AUTH
+     char *reason;
+ #endif /* AFS_AUTH */
+
+ #ifdef DCE_AUTH
+     sec_passwd_rec_t pwr;
+     sec_login_handle_t lhdl;
+     boolean32 rstpwd;
+     sec_login_auth_src_t asrc;
+     error_status_t status;
+ #endif /* DCE_AUTH */
+
     if (logged_in || askpasswd == 0) {
 #ifdef VERBOSE_ERROR_LOGING
         syslog (LOG_NOTICE, "FTP LOGIN REFUSED (PASS before USER) FROM %s",
***************
*** 2370,2375 ****
--- 2395,2412 ----
 #ifdef ULTRIX_AUTH
         if ((numfails = ultrix_check_pass(passwd, xpasswd)) >= 0) {
 #else
+         if (pw != NULL) {
+ #ifdef AFS_AUTH
+       if (!strcmp(pw->pw_passwd,"!")) {
+         if (ka_UserAuthenticateGeneral(KA_USERAUTH_VERSION | KA_USERAUTH_DOSETPAG,
+                                        pw -> pw_name,
+                                        "", 0, passwd, 0, 0, 0,
+                                        &reason) == 0) {
+           rval = 0;
+           } else
+             printf("230-AFS: %s",reason);
+         } else
+ #endif /* AFS_AUTH */
         /* The strcmp does not catch null passwords! */
       if (pw !=NULL && *pw->pw_passwd != '\0' &&
 #ifdef HAS_PW_EXPIRE
***************
*** 2378,2384 ****
           strcmp(xpasswd, pw->pw_passwd) == 0) {
 #endif
           rval = 0;
!            }
         if(rval){
         reply(530, "Login incorrect.");

--- 2415,2463 ----
           strcmp(xpasswd, pw->pw_passwd) == 0) {
 #endif
           rval = 0;
!            }
!
! #ifdef DCE_AUTH
! #ifndef ALWAYS_TRY_DCE
!           else
! #endif
!             {
!             sec_login_setup_identity ((unsigned_char_p_t) pw->pw_name,
!                                       sec_login_no_flags,&lhdl,&status);
!             if (status == error_status_ok) {
!               printf ("230-sec_login_setup_identity OK\n");
!               pwr.key.tagged_union.plain = (idl_char *) passwd;
!               pwr.key.key_type = sec_passwd_plain;
!               pwr.pepper = 0;
!               pwr.version_number = sec_passwd_c_version_none;
!               /* validate password with login context */
!               sec_login_valid_and_cert_ident (lhdl,&pwr,&rstpwd,&asrc,&status);
!               if (!rstpwd && (asrc == sec_login_auth_src_network) &&
!                   (status == error_status_ok)) {
!              printf ("230-sec_login_valid_and_cert_ident OK\n");
!                 sec_login_set_context (lhdl,&status);
!                 printf("230-sec_login_set_context finished\n");
!                 if (status != error_status_ok) {
!                   int pstatus;
!                     dce_error_string_t s;
!                   printf("230-Error status: %d:\n",status);
!
!                   dce_error_inq_text(status,s,&pstatus);
!                   printf("230-%s\n",s);
!                   fflush(stderr);
!                   sec_login_purge_context(lhdl, &status);
!                 } else {
!                   /*sec_login_get_pwent(lhdl, &pw, &status);*/
!                   rval = 0;
!                 }
!               }
!             }
!           }
!
! #endif
!
!       }
!
         if(rval){
         reply(530, "Login incorrect.");

===================================================================
RCS file: makefiles/RCS/Makefile.aix,v
retrieving revision 1.1
diff -c -r1.1 makefiles/Makefile.aix
*** 1.1 1999/03/10 12:44:00
--- makefiles/Makefile.aix      1999/03/10 12:44:46
***************
*** 6,21 ****
 CC_        = cc
 CC_YES     = xlc
 CC         = ${CC_${LF}}
! IFLAGS     = -I.. -I../support
! LFLAGS     = -L../support
! CFLAGS_    = -O2 -D_NO_PROTO ${IFLAGS} ${LFLAGS}
! CFLAGS_YES = -O2 -D_AIX42 ${IFLAGS} ${LFLAGS}
 CFLAGS     = ${CFLAGS_${LF}}
 XOBJS      =
! LIBES      = -lsupport -ls
 LIBC       = /lib/libc.a
 LINTFLAGS  =
 LKERB      = -lauth -lckrb -lkrb -ldes
 XLIBS      = ${LIBES}
 MKDEP      = ../util/mkdep

--- 6,28 ----
 CC_        = cc
 CC_YES     = xlc
 CC         = ${CC_${LF}}
! IFLAGS     = -I.. -I../support -I/usr/afsws/include
! LFLAGS     = -L../support-L/usr/afsws/lib -L/usr/afsws/lib/afs
! CFLAGS_    = -g -DDEBUG -DAFS_AUTH -DUSE_ETC_FTPD -D_NO_PROTO ${IFLAGS} ${LFLAGS}
! CFLAGS_YES = -g -DDEBUG -DAFS_AUTH -DUSE_ETC_FTPD -D_AIX42 ${IFLAGS} ${LFLAGS}
 CFLAGS     = ${CFLAGS_${LF}}
 XOBJS      =
! LIBES      = -lsupport -ls ${LAFS}
 LIBC       = /lib/libc.a
 LINTFLAGS  =
 LKERB      = -lauth -lckrb -lkrb -ldes
+ LAFS     = -lkauth -lubik \
+              -lprot \
+              -lrxkad -lrx -llwp \
+              -lauth   -lsys \
+              -lrxkad -ldes \
+              -lcmd -lcom_err -laudit \
+              /usr/afsws/lib/afs/util.a -lc
 XLIBS      = ${LIBES}
 MKDEP      = ../util/mkdep

From [email protected]  Thu Jul 15 03:05:34 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id DAA03922
       for <[email protected]>; Thu, 15 Jul 1999 03:05:34 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id DAA31107;
       Thu, 15 Jul 1999 03:06:03 -0500 (CDT)
Received: from basil.acr.net.au (basil.acr.net.au [203.22.236.98])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id DAA16024
       for <[email protected]>; Thu, 15 Jul 1999 03:00:41 -0500 (CDT)
Received: from 380ED.au.ibm.com (be2511s114.acr.net.au [203.22.236.114])
       by basil.acr.net.au (8.9.1/8.9.1) with ESMTP id SAA15055;
       Thu, 15 Jul 1999 18:12:54 +1000 (EST)
Message-Id: <[email protected]>
Date: Thu, 15 Jul 1999 18:00:47 +1000
Reply-To: [email protected]
Sender: [email protected]
From: "Geoff Terry" <[email protected]>
To: <[email protected]>, <[email protected]>
Subject: Re: Can't build data connection
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
X-MSMail-Priority: Normal
X-Priority: 3
X-Mailer: Microsoft Internet Mail 4.70.1155
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN

Juan,
You probably should upgrade to 2.5.0.
In anycase your problem sounds like you can establish a command port but
not a data transfer port.
It may be that you need to use PASV mode on your ftp client or look at your
firewall configurations.
I dont know but perhaps BETA18 forces PASV?

PS I currently use VR17 on AIX 4.2 and it works fine.

Regards
Geoff
[email protected]
[email protected]
----------
> From: [email protected]
> To: [email protected]
> Subject: Can't build data connection
> Date: Thursday, 15 July 1999 16:48
>
>
>
> Hello all !!!
>
>      I'm just new to this, so excuse me for my faults in advance.
>      I'm running Version wu-2.4.2-academ[BETA-18] on AIX 4.2.1, I've got
> the same configuration files which ran on BETA 15 just fine.
>      When making a connection, I can login but when trying x-transfering
or
> just make an ls, I get the next error:
>
>      500 Illegal PORT Command
>      500 Can't build data connection: no PORT specified
>
>      I think it's a compilation problem, but I've been once and again
over
> the compilation and see everything OK, has anybody the same problem or
> someone similar ???
>
>      Thanks a lot
>
> Juan Alberto Agudo Huertas.
>
> Jagudo.
> ---------------------------------------------
>
>

From [email protected]  Thu Jul 15 07:19:01 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id HAA04861
       for <[email protected]>; Thu, 15 Jul 1999 07:19:01 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id HAA28432;
       Thu, 15 Jul 1999 07:19:33 -0500 (CDT)
Received: from [192.168.10.251] ([195.97.152.114])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id HAA28376
       for <[email protected]>; Thu, 15 Jul 1999 07:15:07 -0500 (CDT)
Received: from 192.168.10.197 by 192.168.10.251
    with SMTP (QuickMail Pro Server for MacOS 1.0.3); 15 JUL 99 14:14:18 UT
Message-Id: <[email protected]>
Date: 15 Jul 99 14:14:19 +0100
Reply-To: Claus Larsen <[email protected]>
Sender: [email protected]
From: Claus Larsen <[email protected]>
To: "[email protected]" <[email protected]>
Subject: No files (LIST/NLST)
MIME-Version: 1.0
Content-Type: text/plain; charset="US-Ascii"
Content-Transfer-Encoding: 8bit
X-Mailer: QuickMail Pro 1.5.3 (Mac)
X-Priority: 3
X-MIME-Autoconverted: from quoted-printable to 8bit by wugate.wustl.edu id HAA26238
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN

I use wu-ftpd 2.5.0 on aix 4.3.2.

I have the problem with no files listed in browser, other clients working fine, for all my normal user accounts, a LIST/NLST problem I know. I've setup an anonymous ftp account using /usr/samples/tcpip/anon.ftp (a script provided from IBM), and that account is working fine with all clients.
The scripts copies files to /home/ftp, e.g. /bin/ls to /home/ftp/bin/ls, so the files available for the anonymous account and the other account (e.g. root) should be the same. But somehow it doesn't work.
Anyone has the same problem or any good ideas?
After installing wu-ftpd, in.ftpd, ftpaccess and other files are placed in /etc, could this the reason for my problems? Another thing, the deamon doesn't seem to use the ftpaccess file (and I'm using the -a option in /etc/inetd.conf). I've tried putting the ftpaccess file in /usr/local/lib/ftpd but that doesn't work either.

Thanks

Claus Larsen, webmaster, email: [email protected]
Herning Folkeblad Internet, Oestergade 25, DK-7400 Herning
Phone: 96263700, Fax: 97213804, URL: http://www.herningfolkeblad.dk



From [email protected]  Thu Jul 15 07:32:00 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id HAA04925
       for <[email protected]>; Thu, 15 Jul 1999 07:31:59 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id HAA15276;
       Thu, 15 Jul 1999 07:32:27 -0500 (CDT)
Received: from mailgw1.telekurs.com (mailgw1.telekurs.com [193.247.180.58])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id HAA05361
       for <[email protected]>; Thu, 15 Jul 1999 07:26:54 -0500 (CDT)
Received: (qmail 662 invoked by uid 107); 15 Jul 1999 14:26:52 +0200
Received: from localhost (HELO locarno.telekurs.com) (127.0.0.1)
 by localhost with SMTP; 15 Jul 1999 12:26:52 -0000
Received: from payserv.telekurs.com
       by locarno.telekurs.com  with ESMTP id OAA07064
       for <[email protected]>; Thu, 15 Jul 1999 14:26:51 +0200 (METDST)
Message-Id: <[email protected]>
Date: Thu, 15 Jul 1999 14:26:50 +0200
Reply-To: [email protected]
Sender: [email protected]
From: Juan Pereto <[email protected]>
To: [email protected]
Subject: Tool for user management
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
X-Mailer: Mozilla 4.51 [de] (WinNT; I)
X-Accept-Language: de
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN

Hello everybody

Do you know where I can get some comfortable tools to administrate my
users ?

I use wu-ftpd 2.5.0 and Solaris 2.6

Thanks
Juan Pereto


From [email protected]  Thu Jul 15 07:44:58 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id HAA05003
       for <[email protected]>; Thu, 15 Jul 1999 07:44:57 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id HAA05522;
       Thu, 15 Jul 1999 07:45:28 -0500 (CDT)
Received: from mail.vr.net ([email protected] [205.133.13.8])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id HAA10993
       for <[email protected]>; Thu, 15 Jul 1999 07:42:46 -0500 (CDT)
Received: (from lundberg@localhost)
       by mail.vr.net (8.9.3/8.9.3) id IAA21384;
       Thu, 15 Jul 1999 08:42:38 -0400
Message-Id: <[email protected]>
Date: Thu, 15 Jul 1999 08:42:37 -0400
Reply-To: Gregory A Lundberg <[email protected]>
Sender: [email protected]
From: Gregory A Lundberg <[email protected]>
To: Claus Larsen <[email protected]>
Cc: WU-FTPD Discussion List <[email protected]>
Subject: Re: No files (LIST/NLST)
In-Reply-To: <[email protected]>; from Claus Larsen on Thu, Jul 15, 1999 at 02:14:19PM +0100
References: <[email protected]>
Mime-Version: 1.0
Content-Type: multipart/signed; boundary="k+w/mQv8wyuph6w0"; micalg=pgp-md5;
       protocol="application/pgp-signature"
X-Mailer: Mutt 0.95.6i
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN


--k+w/mQv8wyuph6w0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable

On Thu, Jul 15, 1999 at 02:14:19PM +0100, Claus Larsen wrote:

> I use wu-ftpd 2.5.0 on aix 4.3.2.
>=20
> I have the problem with no files listed in browser, other clients working
> fine, for all my normal user accounts, a LIST/NLST problem I know. I've
> setup an anonymous ftp account using /usr/samples/tcpip/anon.ftp (a
> script provided from IBM), and that account is working fine with all
> clients.
>=20
> The scripts copies files to /home/ftp, e.g. /bin/ls to /home/ftp/bin/ls,
> so the files available for the anonymous account and the other account
> (e.g. root) should be the same. But somehow it doesn't work.
>=20
> Anyone has the same problem or any good ideas?=20
>=20
> After installing wu-ftpd, in.ftpd, ftpaccess and other files are placed
> in /etc, could this the reason for my problems? Another thing, the deamon
> doesn't seem to use the ftpaccess file (and I'm using the -a option in
> /etc/inetd.conf). I've tried putting the ftpaccess file in
> /usr/local/lib/ftpd but that doesn't work either.

Check that the ftpaccess file is where the daemon expects it to be.  Be
sure you did a kill -HUP in inetd to tell it to use the new command line.

Your directory listing problem is a FAQ.

The location of the latest version of wu-ftpd can be found in the=20
directory
=20
     ftp://ftp.wu-ftpd.org/pub/wu-ftpd/
=20
wu-ftpd Resource Center:  http://www.landfield.com/wu-ftpd/
wu-ftpd FAQ:              http://www.cetis.hvu.nl/~koos/wu-ftpd-faq.html
wu-ftpd list archive:     http://www.landfield.com/wu-ftpd/mail-archive/

--=20

Gregory A Lundberg              WU-FTPD Development Group
1441 Elmdale Drive              [email protected]
Kettering, OH 45409-1615 USA    1-800-809-2195

--k+w/mQv8wyuph6w0
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5

iQB1AwUBN43JJg2nXFkJc83RAQHAcQMAwwX2+odjnNu1bZ+dY9D06SDPBBxGTMwq
q1l09lrPTfAkWsW0QrP9U26BqEW/3gc2ske5QZNk/CKCccUPvnZUGExLEPNNlY+b
2g+mrV5LRKIQCQ2i9f6ijnGO/a7K8rMh
=Ktg+
-----END PGP SIGNATURE-----

--k+w/mQv8wyuph6w0--

From [email protected]  Thu Jul 15 07:45:56 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id HAA05011
       for <[email protected]>; Thu, 15 Jul 1999 07:45:56 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id HAA28886;
       Thu, 15 Jul 1999 07:46:21 -0500 (CDT)
Received: from mail.vr.net ([email protected] [205.133.13.8])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id HAA03915
       for <[email protected]>; Thu, 15 Jul 1999 07:45:04 -0500 (CDT)
Received: (from lundberg@localhost)
       by mail.vr.net (8.9.3/8.9.3) id IAA21401;
       Thu, 15 Jul 1999 08:44:54 -0400
Message-Id: <[email protected]>
Date: Thu, 15 Jul 1999 08:44:54 -0400
Reply-To: Gregory A Lundberg <[email protected]>
Sender: [email protected]
From: Gregory A Lundberg <[email protected]>
To: [email protected]
Cc: WU-FTPD Discussion List <[email protected]>
Subject: Re: Can't build data connection
In-Reply-To: <[email protected]>; from [email protected] on Thu, Jul 15, 1999 at 08:48:34AM +0200
References: <[email protected]>
Mime-Version: 1.0
Content-Type: multipart/signed; boundary="5/uDoXvLw7AC5HRs"; micalg=pgp-md5;
       protocol="application/pgp-signature"
X-Mailer: Mutt 0.95.6i
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN


--5/uDoXvLw7AC5HRs
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable

On Thu, Jul 15, 1999 at 08:48:34AM +0200, [email protected] wrote:

>      I'm just new to this, so excuse me for my faults in advance.  I'm
>      running Version wu-2.4.2-academ[BETA-18] on AIX 4.2.1, I've got the
>      same configuration files which ran on BETA 15 just fine.  When
>      making a connection, I can login but when trying x-transfering or
>      just make an ls, I get the next error:
>=20
>      500 Illegal PORT Command
>      500 Can't build data connection: no PORT specified
>=20
>      I think it's a compilation problem, but I've been once and again
>      over the compilation and see everything OK, has anybody the same
>      problem or someone similar ???

Probably a badly configured proxy/firewall.  The PORT must tell the daemon
to connect to the same IP address as the control connection was on.

Also, you need to upgrade to 2.5.0 for critical security reasons.

The location of the latest version of wu-ftpd can be found in the=20
directory
=20
     ftp://ftp.wu-ftpd.org/pub/wu-ftpd/
=20
wu-ftpd Resource Center:  http://www.landfield.com/wu-ftpd/
wu-ftpd FAQ:              http://www.cetis.hvu.nl/~koos/wu-ftpd-faq.html
wu-ftpd list archive:     http://www.landfield.com/wu-ftpd/mail-archive/

--=20

Gregory A Lundberg              WU-FTPD Development Group
1441 Elmdale Drive              [email protected]
Kettering, OH 45409-1615 USA    1-800-809-2195

--5/uDoXvLw7AC5HRs
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5

iQB1AwUBN43Jsg2nXFkJc83RAQHBkgMAoIqZ85+Gnsz7WgGZTibos9iW+kgBqsfk
Wq3Z2F2cooQkQtLlpmesqcRi1FItYq6x6SLcjazg8OSmjY+Emp9cOUf6/NfzHyMr
qLkZLJohDEW+BJYsuRiNZbzfYexGB28k
=r24C
-----END PGP SIGNATURE-----

--5/uDoXvLw7AC5HRs--

From [email protected]  Thu Jul 15 07:51:15 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id HAA05037
       for <[email protected]>; Thu, 15 Jul 1999 07:51:14 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id HAA23408;
       Thu, 15 Jul 1999 07:51:44 -0500 (CDT)
Received: from mail.vr.net ([email protected] [205.133.13.8])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id HAA22889
       for <[email protected]>; Thu, 15 Jul 1999 07:48:47 -0500 (CDT)
Received: (from lundberg@localhost)
       by mail.vr.net (8.9.3/8.9.3) id IAA21454;
       Thu, 15 Jul 1999 08:47:46 -0400
Message-Id: <[email protected]>
Date: Thu, 15 Jul 1999 08:47:46 -0400
Reply-To: Gregory A Lundberg <[email protected]>
Sender: [email protected]
From: Gregory A Lundberg <[email protected]>
To: Rainer Schoepf <[email protected]>
Cc: [email protected],
       WU-FTPD Discussion List <[email protected]>
Subject: Re: Does wu-ftp support DCE?
In-Reply-To: <[email protected]>; from Rainer Schoepf on Thu, Jul 15, 1999 at 09:41:51AM +0200
References: <[email protected]> <[email protected]>
Mime-Version: 1.0
Content-Type: multipart/signed; boundary=RhUH2Ysw6aD5utA4; micalg=pgp-md5;
       protocol="application/pgp-signature"
X-Mailer: Mutt 0.95.6i
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN


--RhUH2Ysw6aD5utA4
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable

On Thu, Jul 15, 1999 at 09:41:51AM +0200, Rainer Schoepf wrote:

> Appended are patches for wu-ftpd-2.4.2-vr16 to authenticate against AFS
> and/or DCE. Note that I never really tested DCE alone, without AFS, so
> there might be some problems. Just replace -DAFS_AUTH by -DDCE_AUTH and
> ${LAFS} by -ldce in the Makefile.

Thank you for your submission; I will clean them up and submit the patches
to the development group for review and possible inclusion in the base-line
daemon.

Instructions for submitting patches directly to the development group are
included in the FAQ.

--=20

Gregory A Lundberg              WU-FTPD Development Group
1441 Elmdale Drive              [email protected]
Kettering, OH 45409-1615 USA    1-800-809-2195

--RhUH2Ysw6aD5utA4
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5

iQB1AwUBN43KXg2nXFkJc83RAQF7QAMAhVFNQEdj/xsHXiE2KV61OpuENPX0mjvC
WUMswgMNnH1uRgU9i7ULLKoAbfSmB46ikWjzUZ6Ck4F82pyMgt72PVFkSuElAh4d
J2zlA/KxjohfpGfpxSvBYkqyHQn0XTqF
=g9HF
-----END PGP SIGNATURE-----

--RhUH2Ysw6aD5utA4--

From [email protected]  Thu Jul 15 07:52:03 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id HAA05048
       for <[email protected]>; Thu, 15 Jul 1999 07:52:03 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id HAA25518;
       Thu, 15 Jul 1999 07:52:35 -0500 (CDT)
Received: from mail.vr.net ([email protected] [205.133.13.8])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id HAA30257
       for <[email protected]>; Thu, 15 Jul 1999 07:50:35 -0500 (CDT)
Received: (from lundberg@localhost)
       by mail.vr.net (8.9.3/8.9.3) id IAA21500;
       Thu, 15 Jul 1999 08:50:16 -0400
Message-Id: <[email protected]>
Date: Thu, 15 Jul 1999 08:50:16 -0400
Reply-To: Gregory A Lundberg <[email protected]>
Sender: [email protected]
From: Gregory A Lundberg <[email protected]>
To: Juan Pereto <[email protected]>
Cc: WU-FTPD Discussion List <[email protected]>
Subject: Re: Tool for user management
In-Reply-To: <[email protected]>; from Juan Pereto on Thu, Jul 15, 1999 at 02:26:50PM +0200
References: <[email protected]>
Mime-Version: 1.0
Content-Type: multipart/signed; boundary=AsxXAMtlQ5JHofzM; micalg=pgp-md5;
       protocol="application/pgp-signature"
X-Mailer: Mutt 0.95.6i
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN


--AsxXAMtlQ5JHofzM
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable

On Thu, Jul 15, 1999 at 02:26:50PM +0200, Juan Pereto wrote:

> Do you know where I can get some comfortable tools to administrate my
> users ?
>=20
> I use wu-ftpd 2.5.0 and Solaris 2.6

Use the tools needed to administer normal users on your system (ie., on
Linux, I use adduser/useradd).  Generally, with only minor modifications,
these tools can be made to handle the ftp-local etc/passwd and etc/group
files at the same time they are managing the system files and creating home
directories.

--=20

Gregory A Lundberg              WU-FTPD Development Group
1441 Elmdale Drive              [email protected]
Kettering, OH 45409-1615 USA    1-800-809-2195

--AsxXAMtlQ5JHofzM
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5

iQB1AwUBN43K9A2nXFkJc83RAQEbBwL/fLjJ3O4ty4FVcx49flLnRU1YtoeajtCv
kEhvyH8XAX8oI5XYb35Shnj75Q1dtqGKarL+T/PzMn4QMqdWdkL6rMS7z73WkCX9
qhz7weO1DDpDs5YgAY6njylWbbSbCiKu
=Fsw/
-----END PGP SIGNATURE-----

--AsxXAMtlQ5JHofzM--

From [email protected]  Thu Jul 15 08:04:06 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id IAA05124
       for <[email protected]>; Thu, 15 Jul 1999 08:04:05 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id IAA10515;
       Thu, 15 Jul 1999 08:04:36 -0500 (CDT)
Received: from [192.168.10.251] ([195.97.152.114])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id IAA02645
       for <[email protected]>; Thu, 15 Jul 1999 08:02:07 -0500 (CDT)
Received: from 192.168.10.138 by 192.168.10.251
    with SMTP (QuickMail Pro Server for MacOS 1.0.3); 15 JUL 99 15:01:17 UT
Message-Id: <[email protected]>
Date: 15 Jul 99 15:01:17 +0100
Reply-To: Claus Larsen <[email protected]>
Sender: [email protected]
From: Claus Larsen <[email protected]>
To: "WU-FTPD Discussion List" <[email protected]>
Subject: Re: No files (LIST/NLST)
MIME-Version: 1.0
Content-Type: text/plain; charset="US-Ascii"
Content-Transfer-Encoding: 8bit
X-Mailer: QuickMail Pro 1.5.3 (Mac)
X-Priority: 3
X-MIME-Autoconverted: from quoted-printable to 8bit by wugate.wustl.edu id IAA17201
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN

        Reply to:   Re: No files (LIST/NLST)
hallo again

I appreciate your answer, but in fact my problems not in the faq. If you read my question once again you'll see that my problems is not with anonymous users (which is the problem mentioned in the faq), but my real users. I've read the faq and browsed the mail archieves, but I haven't been able to find other's with the same problem.

Claus Larsen, webmaster, email: [email protected]
Herning Folkeblad Internet, Oestergade 25, DK-7400 Herning
Phone: 96263700, Fax: 97213804, URL: http://www.herningfolkeblad.dk

Gregory A Lundberg wrote:
>On Thu, Jul 15, 1999 at 02:14:19PM +0100, Claus Larsen wrote:
>
>> I use wu-ftpd 2.5.0 on aix 4.3.2.
>> >> I have the problem with no files listed in browser, other clients working
>> fine, for all my normal user accounts, a LIST/NLST problem I know. I've
>> setup an anonymous ftp account using /usr/samples/tcpip/anon.ftp (a
>> script provided from IBM), and that account is working fine with all
>> clients.
>> >> The scripts copies files to /home/ftp, e.g. /bin/ls to /home/ftp/bin/ls,
>> so the files available for the anonymous account and the other account
>> (e.g. root) should be the same. But somehow it doesn't work.
>> >> Anyone has the same problem or any good ideas? >> >> After installing wu-ftpd, in.ftpd, ftpaccess and other files are placed
>> in /etc, could this the reason for my problems? Another thing, the deamon
>> doesn't seem to use the ftpaccess file (and I'm using the -a option in
>> /etc/inetd.conf). I've tried putting the ftpaccess file in
>> /usr/local/lib/ftpd but that doesn't work either.
>
>Check that the ftpaccess file is where the daemon expects it to be.  Be
>sure you did a kill -HUP in inetd to tell it to use the new command line.
>
>Your directory listing problem is a FAQ.
>
>The location of the latest version of wu-ftpd can be found in the >directory
> >      ftp://ftp.wu-ftpd.org/pub/wu-ftpd/
> >wu-ftpd Resource Center:  http://www.landfield.com/wu-ftpd/
>wu-ftpd FAQ:              http://www.cetis.hvu.nl/~koos/wu-ftpd-faq.html
>wu-ftpd list archive:     http://www.landfield.com/wu-ftpd/mail-archive/
>
>-- >
>Gregory A Lundberg              WU-FTPD Development Group
>1441 Elmdale Drive              [email protected]
>Kettering, OH 45409-1615 USA    1-800-809-2195




From [email protected]  Thu Jul 15 11:18:45 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id LAA08580
       for <[email protected]>; Thu, 15 Jul 1999 11:18:44 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id LAA20185;
       Thu, 15 Jul 1999 11:19:08 -0500 (CDT)
Received: from mail.vr.net ([email protected] [205.133.13.8])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id LAA19582
       for <[email protected]>; Thu, 15 Jul 1999 11:16:43 -0500 (CDT)
Received: (from lundberg@localhost)
       by mail.vr.net (8.9.3/8.9.3) id MAA23529;
       Thu, 15 Jul 1999 12:16:29 -0400
Message-Id: <[email protected]>
Date: Thu, 15 Jul 1999 12:16:29 -0400
Reply-To: Gregory A Lundberg <[email protected]>
Sender: [email protected]
From: Gregory A Lundberg <[email protected]>
To: Claus Larsen <[email protected]>
Cc: WU-FTPD Discussion List <[email protected]>
Subject: Re: No files (LIST/NLST)
In-Reply-To: <[email protected]>; from Claus Larsen on Thu, Jul 15, 1999 at 03:01:17PM +0100
References: <[email protected]>
Mime-Version: 1.0
Content-Type: multipart/signed; boundary=XStn23h1fwudRqtG; micalg=pgp-md5;
       protocol="application/pgp-signature"
X-Mailer: Mutt 0.95.6i
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN


--XStn23h1fwudRqtG
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable

On Thu, Jul 15, 1999 at 03:01:17PM +0100, Claus Larsen wrote:

> I appreciate your answer, but in fact my problems not in the faq. If you
> read my question once again you'll see that my problems is not with
> anonymous users (which is the problem mentioned in the faq), but my real
> users. I've read the faq and browsed the mail archieves, but I haven't
> been able to find other's with the same problem.

For real users:  if you can do '/bin/ls' from a telnet shell prompt, it
will usually work via FTP.  You might do a 'which ls' to see where the
program actually resides on your system; the FTP daemon will ONLY use
/bin/ls.

For guest users:  if you can do '/bin/ls' in a chroot, it will usually work
via FTP.

For anonymous users:  if you can do '/bin/ls' in a chroot, it will usually
work via FTP.

Instructions for testing 'ls' in a chroot have been posted and are in the
FAQ  or the Guest HOWTO (I don't recall which).

If the '/bin/ls' command works and you still cannot LIST (NLST should work
fine at all times), read the FAQ/GuestHOWTO to see if there are specific
instructions about special libraries, devices, etc, needed on your
platform.  A good place to find those on many systems, is also the FTP
server setup instrcutions which came with your OS.

--=20

Gregory A Lundberg              WU-FTPD Development Group
1441 Elmdale Drive              [email protected]
Kettering, OH 45409-1615 USA    1-800-809-2195

--XStn23h1fwudRqtG
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5

iQB1AwUBN437Rw2nXFkJc83RAQHWRwL/WkuWcKauWmCzHwMWRQDX0VPEiC0xQTCr
qyjj9ISlbWECUEOgjc4r69aqXLllGnjkqXN80G0NiIo+yusX0y59HU5qsAts8cHT
wPnFWBxCQa3mnPSTsatkBtUBiIBnRlTJ
=JQiS
-----END PGP SIGNATURE-----

--XStn23h1fwudRqtG--

From [email protected]  Thu Jul 15 12:30:49 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id MAA09490
       for <[email protected]>; Thu, 15 Jul 1999 12:30:49 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id MAA24059;
       Thu, 15 Jul 1999 12:31:13 -0500 (CDT)
Received: from rosebud.ncd.com (rosebud.ncd.com [138.43.212.19])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id MAA15389
       for <[email protected]>; Thu, 15 Jul 1999 12:25:25 -0500 (CDT)
Received: from bachelor.pcx.ncd.com ([email protected] [192.86.85.5]) by rosebud.ncd.com (8.9.1/8.6.9) with SMTP id KAA21943 for <[email protected]>; Thu, 15 Jul 1999 10:24:53 -0700 (PDT)
Received: from summanulla.pcx.ncd.com ([email protected] [192.86.85.147]) by bachelor.pcx.ncd.com (8.6.9/8.6.5) with ESMTP id KAA15802 for <[email protected]>; Thu, 15 Jul 1999 10:25:07 -0700
Received: from summanulla.pcx.ncd.com (IDENT:alano@localhost [127.0.0.1])
       by summanulla.pcx.ncd.com (8.9.3/8.8.7) with ESMTP id CAA20453
       for <[email protected]>; Fri, 16 Jul 1999 02:21:59 -0700
Message-Id: <[email protected]>
Date: Fri, 16 Jul 1999 02:21:59 -0700
Reply-To: [email protected]
Sender: [email protected]
From: Alan Olsen <[email protected]>
To: [email protected]
Subject: Log Analysis Tools for Wu-FTP?
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
X-Mailer: exmh version 2.0.2
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN

Does anyone know of good log analysis tools for FTP logs?  I have seen plenty
for web logs, but next to nothing for ftp.

I would prefer open source, but I am willing to buy something in neccisary.



From [email protected]  Thu Jul 15 12:57:15 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id MAA09620
       for <[email protected]>; Thu, 15 Jul 1999 12:57:14 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id MAA17544;
       Thu, 15 Jul 1999 12:57:40 -0500 (CDT)
Received: from mail.vr.net ([email protected] [205.133.13.8])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id MAA06219
       for <[email protected]>; Thu, 15 Jul 1999 12:52:24 -0500 (CDT)
Received: (from lundberg@localhost)
       by mail.vr.net (8.9.3/8.9.3) id NAA24392;
       Thu, 15 Jul 1999 13:47:12 -0400
Message-Id: <[email protected]>
Date: Thu, 15 Jul 1999 13:47:12 -0400
Reply-To: Gregory A Lundberg <[email protected]>
Sender: [email protected]
From: Gregory A Lundberg <[email protected]>
To: Alan Olsen <[email protected]>
Cc: WU-FTPD Discussion List <[email protected]>
Subject: Re: Log Analysis Tools for Wu-FTP?
In-Reply-To: <[email protected]>; from Alan Olsen on Fri, Jul 16, 1999 at 02:21:59AM -0700
References: <[email protected]>
Mime-Version: 1.0
Content-Type: multipart/signed; boundary=V0207lvV8h4k8FAm; micalg=pgp-md5;
       protocol="application/pgp-signature"
X-Mailer: Mutt 0.95.6i
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN


--V0207lvV8h4k8FAm
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable

On Fri, Jul 16, 1999 at 02:21:59AM -0700, Alan Olsen wrote:

> Does anyone know of good log analysis tools for FTP logs?  I have seen
> plenty for web logs, but next to nothing for ftp.
>=20
> I would prefer open source, but I am willing to buy something in
> neccisary.

ftp://ftp.wu-ftpd.org/pub/support/xferstats-2.07.tar.gz

is an excellent replacement for the xferstats which comes with the daemon.

--=20

Gregory A Lundberg              WU-FTPD Development Group
1441 Elmdale Drive              [email protected]
Kettering, OH 45409-1615 USA    1-800-809-2195

--V0207lvV8h4k8FAm
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5

iQB1AwUBN44Qig2nXFkJc83RAQG5vAL/c1VvUClqv8syr1JL494osNGb7WaTo70v
Jg50htLQHTOZID1qO5OZSbGeHR+BbMpyG8iv8Wy/zmeuzyRIL1YzqgGWczkIGBvx
sKTdLfq2y4uolTQjcqV4oN9/AoM3ft2y
=ODFT
-----END PGP SIGNATURE-----

--V0207lvV8h4k8FAm--

From [email protected]  Thu Jul 15 13:03:34 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id NAA09667
       for <[email protected]>; Thu, 15 Jul 1999 13:03:33 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id NAA24317;
       Thu, 15 Jul 1999 13:04:00 -0500 (CDT)
Received: from castor.ipac.caltech.edu (ipac.caltech.edu [131.215.11.35])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id MAA27332
       for <[email protected]>; Thu, 15 Jul 1999 12:57:27 -0500 (CDT)
Received: from light (light.ipac.caltech.edu [134.4.40.84])
         by castor.ipac.caltech.edu (8.8.8/8.6.4)
         with ESMTP id KAA14908
         for <[email protected]>; Thu, 15 Jul 1999 10:57:26 -0700 (PDT)
Received: (jrl@localhost) by light (SMI-8.6/8.6.4) id KAA10014 for [email protected]; Thu, 15 Jul 1999 10:57:26 -0700
Message-Id: <199907151757.KAA10014@light>
Date: Thu, 15 Jul 1999 10:57:26 -0700
Reply-To: [email protected]
Sender: [email protected]
From: Jack Lampley <[email protected]>
To: [email protected]
Subject: More on linked disks
X-Sun-Charset: US-ASCII
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN



Concerning the problem accessing linked disks within the ftp file structure. There is a
number in front of the error:

ftp> cd /pub/2mass
550 /pub/2mass: No such file or directory.

I did:

cd ~ftp
chroot ~ftp /bin/ls -alR

and the links show up ok:


/pub:
total 12
drwxr-xr-x   4 root     root         512 Jul 14 17:01 .
drwxr-xr-x  10 root     other        512 Jul 14 17:05 ..
lrwxrwxrwx   1 root     other          6 Jul 14 17:01 2mass -> /2mass
lrwxrwxrwx   1 root     other          9 Jul 14 17:01 irsa_ftp -> /irsa_ftp

Any other suggestions?

Thanks,

Jack Lampley, System Administrator
Infrared Processing and Analysis Center (IPAC)
California Institute of Technology (CalTech)
MS 100/22, Pasadena, CA 91125

Telephone : 818-397-9551
Internet  : [email protected]



From [email protected]  Thu Jul 15 13:29:08 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id NAA09836
       for <[email protected]>; Thu, 15 Jul 1999 13:29:07 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id NAA18052;
       Thu, 15 Jul 1999 13:29:25 -0500 (CDT)
Received: from fog.ccsf.cc.ca.us ([email protected] [147.144.1.3])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id NAA08580
       for <[email protected]>; Thu, 15 Jul 1999 13:28:24 -0500 (CDT)
Received: from sol.ccsf.cc.ca.us (sol.ccsf.cc.ca.us [147.144.1.211])
       by fog.ccsf.cc.ca.us (8.8.6 (PHNE_17135)/8.8.6) with SMTP id LAA19086;
       Thu, 15 Jul 1999 11:28:16 -0700 (PDT)
Received: from localhost by sol.ccsf.cc.ca.us (SMI-8.6/SMI-SVR4)
       id LAA05183; Thu, 15 Jul 1999 11:28:12 -0700
Message-Id: <[email protected]>
Date: Thu, 15 Jul 1999 11:28:12 -0700 (PDT)
Reply-To: [email protected]
Sender: [email protected]
From: "Joe R. Jah" <[email protected]>
To: Gregory A Lundberg <[email protected]>
Cc: Alan Olsen <[email protected]>,
       WU-FTPD Discussion List <[email protected]>
Subject: Re: Log Analysis Tools for Wu-FTP?
In-Reply-To: <[email protected]>
MIME-Version: 1.0
Content-Type: MULTIPART/SIGNED; BOUNDARY=V0207lvV8h4k8FAm; MICALG=pgp-md5; PROTOCOL="application/pgp-signature"
Content-ID: <[email protected]>
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN

 This message is in MIME format.  The first part should be readable text,
 while the remaining parts are likely unreadable without MIME-aware tools.
 Send mail to [email protected] for more info.

--V0207lvV8h4k8FAm
Content-Type: TEXT/PLAIN; CHARSET=us-ascii
Content-ID: <[email protected]>

On Thu, 15 Jul 1999, Gregory A Lundberg wrote:

> Date: Thu, 15 Jul 1999 13:47:12 -0400
> From: Gregory A Lundberg <[email protected]>
> Reply-To: Gregory A Lundberg <[email protected]>
> To: Alan Olsen <[email protected]>
> Cc: WU-FTPD Discussion List <[email protected]>
> Subject: Re: Log Analysis Tools for Wu-FTP?
>
> On Fri, Jul 16, 1999 at 02:21:59AM -0700, Alan Olsen wrote:
>
> > Does anyone know of good log analysis tools for FTP logs?  I have seen
> > plenty for web logs, but next to nothing for ftp.
> >
> > I would prefer open source, but I am willing to buy something in
> > neccisary.
>
> ftp://ftp.wu-ftpd.org/pub/support/xferstats-2.07.tar.gz
>
> is an excellent replacement for the xferstats which comes with the daemon.

It is an excellent replacement for the xferstats which comes with the
daemon, but it is not the latest version of the product.  The latest
version that I know of, xferstats-2.13.tar.gz, came out last February.
The URL http://sod.res.cmu.edu/xferstats, but I have not been able to
connect to it ever again.  Unfortunately I have removed the original
archive and I have made changes to my source, so I can not put for
download.  I'd be interested to know if there are newer versions
available.

Joe

    _/   _/_/_/       _/            ____________    __o
    _/   _/   _/      _/       ______________     _-\<,_
_/  _/   _/_/_/   _/  _/                   ......(_)/ (_)
 _/_/ oe _/   _/.  _/_/ ah       [email protected]

--V0207lvV8h4k8FAm--

From [email protected]  Thu Jul 15 13:35:33 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id NAA09877
       for <[email protected]>; Thu, 15 Jul 1999 13:35:32 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id NAA28318;
       Thu, 15 Jul 1999 13:35:53 -0500 (CDT)
Received: from mrelay.bellglobal.com (mrelay.bellglobal.com [198.235.216.100])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id NAA17985
       for <[email protected]>; Thu, 15 Jul 1999 13:30:11 -0500 (CDT)
Received: from aimlab2 by mrelay.bellglobal.com (PMDF V5.1-12 #26722)
with SMTP id <[email protected]> for
[email protected]; Thu, 15 Jul 1999 14:29:37 -0400 (EDT)
Message-Id: <[email protected]>
Date: Thu, 15 Jul 1999 14:36:46 -0400
Reply-To: [email protected]
Sender: [email protected]
From: jamie <[email protected]>
To: [email protected]
Subject: french character upload
MIME-version: 1.0
Content-type: text/plain; charset="iso-8859-1"
Content-transfer-encoding: 7bit
X-Mailer: Microsoft Outlook Express 5.00.2314.1300
X-MSMail-Priority: Normal
X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2314.1300
X-Priority: 3
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN


Has anyone had experience with adding to the filter:

path-filter  guest      /etc/pathmsg  ^[-A-Za-z0-9_\.]*$  ^\.  ^-

basically one of my french users wants to be able to upload an accent
aigue on the e.
( chimpanz\351e )

ver: BeroFTPD 1.3.3

James



From [email protected]  Thu Jul 15 14:01:51 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id OAA10082
       for <[email protected]>; Thu, 15 Jul 1999 14:01:51 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id OAA07530;
       Thu, 15 Jul 1999 14:02:09 -0500 (CDT)
Received: from mail.vr.net ([email protected] [205.133.13.8])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id OAA17472
       for <[email protected]>; Thu, 15 Jul 1999 14:00:10 -0500 (CDT)
Received: (from lundberg@localhost)
       by mail.vr.net (8.9.3/8.9.3) id OAA25152;
       Thu, 15 Jul 1999 14:59:46 -0400
Message-Id: <[email protected]>
Date: Thu, 15 Jul 1999 14:59:46 -0400
Reply-To: Gregory A Lundberg <[email protected]>
Sender: [email protected]
From: Gregory A Lundberg <[email protected]>
To: Jack Lampley <[email protected]>
Cc: [email protected]
Subject: Re: More on linked disks
In-Reply-To: <199907151757.KAA10014@light>; from Jack Lampley on Thu, Jul 15, 1999 at 10:57:26AM -0700
References: <199907151757.KAA10014@light>
Mime-Version: 1.0
Content-Type: multipart/signed; boundary=neYutvxvOLaeuPCA; micalg=pgp-md5;
       protocol="application/pgp-signature"
X-Mailer: Mutt 0.95.6i
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN


--neYutvxvOLaeuPCA
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable

On Thu, Jul 15, 1999 at 10:57:26AM -0700, Jack Lampley wrote:

>=20
>=20
> Concerning the problem accessing linked disks within the ftp file structu=
re. There is a
> number in front of the error:
>=20
> ftp> cd /pub/2mass
> 550 /pub/2mass: No such file or directory.
>=20
> I did:
>=20
> cd ~ftp
> chroot ~ftp /bin/ls -alR
>=20
> and the links show up ok:
>=20
>=20
> ./pub:
> total 12
> drwxr-xr-x   4 root     root         512 Jul 14 17:01 .
> drwxr-xr-x  10 root     other        512 Jul 14 17:05 ..
> lrwxrwxrwx   1 root     other          6 Jul 14 17:01 2mass -> /2mass
> lrwxrwxrwx   1 root     other          9 Jul 14 17:01 irsa_ftp -> /irsa_f=
tp

the links show up, but the filesystems didn't .. of course you didn't
notice that.  you should have see

=2E/2mass

but that's not where it is .. that would be ~ftp/2mass and you didn't mount
it there, you mounted it as /2mass

> Any other suggestions?

Sure.  Do it right.

Mount /dev/<2mass> as ~ftp/pub/2mass and forget the symlink.

Or mount it as ~ftp/2mass and=20
 cd ~ftp/pub
 ln -s ../2mass 2mass

READ MY LIPS .. you CAN NOT mount /dev/<2mass> as /2mass and symlink to it
from the ~ftp area to it.  It will not work.  It cannot be made to work.

--=20

Gregory A Lundberg              WU-FTPD Development Group
1441 Elmdale Drive              [email protected]
Kettering, OH 45409-1615 USA    1-800-809-2195

--neYutvxvOLaeuPCA
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5

iQB1AwUBN44hiQ2nXFkJc83RAQFD9QMAu3eAMSlKEe6dvU7WYIn9s7vZaXWMjRog
Aco5qtPl0K9H6aXpiW+tnSiv+oJ3KKaRVzff3c8Qiu3vtAL42+F8seIREK1ECD7o
NLdm2x24RmCFV79KaMW0r073k/6VvB4k
=8/2C
-----END PGP SIGNATURE-----

--neYutvxvOLaeuPCA--

From [email protected]  Thu Jul 15 14:53:48 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id OAA10478
       for <[email protected]>; Thu, 15 Jul 1999 14:53:47 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id OAA03354;
       Thu, 15 Jul 1999 14:54:13 -0500 (CDT)
Received: from mail.vr.net ([email protected] [205.133.13.8])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id OAA29685
       for <[email protected]>; Thu, 15 Jul 1999 14:48:42 -0500 (CDT)
Received: (from lundberg@localhost)
       by mail.vr.net (8.9.3/8.9.3) id PAA25651;
       Thu, 15 Jul 1999 15:48:30 -0400
Message-Id: <[email protected]>
Date: Thu, 15 Jul 1999 15:48:29 -0400
Reply-To: Gregory A Lundberg <[email protected]>
Sender: [email protected]
From: Gregory A Lundberg <[email protected]>
To: WU-FTPD Discussion List <[email protected]>,
       WU-FTPD Questions <[email protected]>,
       WU-FTPD Development Group <[email protected]>
Subject: AFS and DCE authentication
Mime-Version: 1.0
Content-Type: multipart/signed; boundary="Ns7jmDPpOpCD+GE/"; micalg=pgp-md5;
       protocol="application/pgp-signature"
X-Mailer: Mutt 0.95.6i
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN


--Ns7jmDPpOpCD+GE/
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable

A couple days ago, a patch to add both AFS and DCE authentication was
posted to the discussion list.

I have updated that patch for version 2.5.0 and possible inclusion in a
future version of the daemon.

This change currently only supports AFS and DCE on AIX.  Some editing of
the config and makefiles are required to enable it.

If anyone is interested in testing this change, possibly porting it to
other platforms, and assisting with debugging, I would very much like to
hear from you.

--=20

Gregory A Lundberg              WU-FTPD Development Group
1441 Elmdale Drive              [email protected]
Kettering, OH 45409-1615 USA    1-800-809-2195

--Ns7jmDPpOpCD+GE/
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5

iQB1AwUBN44rSA2nXFkJc83RAQEjWwL/ZzsRNLeVxDvfturpqgg18wpTVGvwZgI2
allXy4cmx4emgo2+KL3SwfDaaike/32bjfWARvJnpKXL4X+X5/2ghKxZlNkT0sMQ
XiSKw3DoxdWuaUxr+bNNHIZ9VIjzE6ca
=jgbv
-----END PGP SIGNATURE-----

--Ns7jmDPpOpCD+GE/--

From [email protected]  Thu Jul 15 15:06:03 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id PAA10604
       for <[email protected]>; Thu, 15 Jul 1999 15:06:02 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id PAA14578;
       Thu, 15 Jul 1999 15:06:27 -0500 (CDT)
Received: from mail.vr.net ([email protected] [205.133.13.8])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id PAA09599
       for <[email protected]>; Thu, 15 Jul 1999 15:05:53 -0500 (CDT)
Received: (from lundberg@localhost)
       by mail.vr.net (8.9.3/8.9.3) id QAA25878;
       Thu, 15 Jul 1999 16:05:46 -0400
Message-Id: <[email protected]>
Date: Thu, 15 Jul 1999 16:05:46 -0400
Reply-To: Gregory A Lundberg <[email protected]>
Sender: [email protected]
From: Gregory A Lundberg <[email protected]>
To: Loveric Shawn P Contr AFRL/IFOSS <[email protected]>
Cc: "'[email protected]'" <[email protected]>
Subject: Re: ftpaccess: deny !nameserved
In-Reply-To: <[email protected]>; from Loveric Shawn P Contr AFRL/IFOSS on Thu, Jul 15, 1999 at 03:56:32PM -0400
References: <[email protected]>
Mime-Version: 1.0
Content-Type: multipart/signed; boundary=RMedoP2+Pr6Rq0N2; micalg=pgp-md5;
       protocol="application/pgp-signature"
X-Mailer: Mutt 0.95.6i
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN


--RMedoP2+Pr6Rq0N2
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable

On Thu, Jul 15, 1999 at 03:56:32PM -0400, Loveric Shawn P Contr AFRL/IFOSS =
wrote:

> Hello everyone.  I have a wu-ftp 2.5.0 configuration question.  I just
> upgraded from version 2.4.2 b 18 to 2.5.0 and it seems that the "deny
> !nameserved" line in the ftpaccess file will not allow me to login into
> my server any more.  If I comment this line out everything seems to work
> fine.
>=20
> According to the ftpaccess man page "deny !nameserved" is used to deny
> any sites without working name servers.  This seems like a rather vague
> discription for this command, can anyone elaborate on this definition?

 ftp://ftp.wu-ftpd.org/pub/wu-ftpd/quickfixes/apply_to_2.5.0/

--=20

Gregory A Lundberg              WU-FTPD Development Group
1441 Elmdale Drive              [email protected]
Kettering, OH 45409-1615 USA    1-800-809-2195

--RMedoP2+Pr6Rq0N2
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5

iQB1AwUBN44xBg2nXFkJc83RAQGEzAL+Nvxqqo10VO5bpQO41ussmyyyTD603s8h
LPSMroOCbXi9mQd1WDPE0HtxGb8We2tMKS8BK6e6lZW0IgecmZOZUT6simZm1Fbl
L39VMxIWvwNDA4w7Y1hNyiXMBrYJzgxn
=4daT
-----END PGP SIGNATURE-----

--RMedoP2+Pr6Rq0N2--

From [email protected]  Thu Jul 15 15:18:49 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id PAA10735
       for <[email protected]>; Thu, 15 Jul 1999 15:18:48 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id PAA02959;
       Thu, 15 Jul 1999 15:19:16 -0500 (CDT)
Received: from mail.unixg.ubc.ca (mail.unixg.ubc.ca [137.82.27.14])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id PAA26688
       for <[email protected]>; Thu, 15 Jul 1999 15:18:10 -0500 (CDT)
Received: from interchange.ubc.ca ([137.82.27.42] ident=jhouwen)
       by mail.unixg.ubc.ca with smtp (Exim 2.12 #1)
       id 114rxK-0005Gx-00
       for [email protected]; Thu, 15 Jul 1999 13:18:10 -0700
Message-Id: <[email protected]>
Date: Thu, 15 Jul 1999 13:18:09 -0700 (PDT)
Reply-To: Joost Houwen <[email protected]>
Sender: [email protected]
From: Joost Houwen <[email protected]>
To: [email protected]
Subject: wuarchive-ftp 2.4 vs. wu-ftp 2.5.0
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN


I am wondering if someone can clarify the following for me (I have
checked the FAQ and list archives but no luck.)

Many _current_ security resources recommend the wuarchive-ftp 2.4
(ftp://wuarchive.wustl.edu/packages/wuarchive-ftpd/), but in the wu-ftp
2.5.0 release announcement it is strongly recommended to upgrade.  This
makes sense to me because the wustl archive files are circa 1997.

Are there specific issues that the "wuarchive" version has?  The recent
CERT bulletin did not specifically address this issue, but focused on the
problems with 2.4.2 and others.  I have checked a variety of the
vulnerability databases, but there seems to be nothing specific.

In general it seems to me a very good idea to use 2.5.0, but I am
wondering if there are any specific security vulnerability issues which
clearly make the case for upgrading?

Thanks,
Joost



From [email protected]  Thu Jul 15 15:24:08 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id PAA10820
       for <[email protected]>; Thu, 15 Jul 1999 15:24:08 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id PAA28755;
       Thu, 15 Jul 1999 15:00:09 -0500 (CDT)
Received: from fsjrez01.adm.rl.af.mil (FSJREZ01.adm.rl.af.mil [128.132.129.29])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id OAA01956
       for <[email protected]>; Thu, 15 Jul 1999 14:57:41 -0500 (CDT)
Received: by FSJREZ01.adm.rl.af.mil with Internet Mail Service (5.5.2448.0)
       id <38YCC6A0>; Thu, 15 Jul 1999 15:56:35 -0400
Message-Id: <[email protected]>
Date: Thu, 15 Jul 1999 15:56:32 -0400
Reply-To: [email protected]
Sender: [email protected]
From: Loveric Shawn P Contr AFRL/IFOSS <[email protected]>
To: "'[email protected]'" <[email protected]>
Subject: ftpaccess: deny !nameserved
MIME-Version: 1.0
Content-Type: text/plain;
       charset="iso-8859-1"
X-Mailer: Internet Mail Service (5.5.2448.0)
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN

Hello everyone.  I have a wu-ftp 2.5.0 configuration question.
I just upgraded from version 2.4.2 b 18 to 2.5.0 and it
seems that the "deny !nameserved" line in the ftpaccess
file will not allow me to login into my server any more.
If I comment this line out everything seems to work fine.

According to the ftpaccess man page "deny !nameserved"
is used to deny any sites without working name servers.
This seems like a rather vague discription for this command,
can anyone elaborate on this definition?

Thanks,
Shawn


P.S. I'm running Solaris 2.6 on a SUN Ultra
Enterprise 3000. I installed a binary package
for wu-ftpd 2.5.0.

From [email protected]  Thu Jul 15 16:43:16 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id QAA11255
       for <[email protected]>; Thu, 15 Jul 1999 16:43:15 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id QAA11316;
       Thu, 15 Jul 1999 16:43:40 -0500 (CDT)
Received: from mail.vr.net ([email protected] [205.133.13.8])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id QAA15163
       for <[email protected]>; Thu, 15 Jul 1999 16:38:29 -0500 (CDT)
Received: (from lundberg@localhost)
       by mail.vr.net (8.9.3/8.9.3) id QAA26223;
       Thu, 15 Jul 1999 16:45:33 -0400
Message-Id: <[email protected]>
Date: Thu, 15 Jul 1999 16:45:33 -0400
Reply-To: Gregory A Lundberg <[email protected]>
Sender: [email protected]
From: Gregory A Lundberg <[email protected]>
To: Joost Houwen <[email protected]>
Cc: WU-FTPD Discussion List <[email protected]>
Subject: Re: wuarchive-ftp 2.4 vs. wu-ftp 2.5.0
In-Reply-To: <[email protected]>; from Joost Houwen on Thu, Jul 15, 1999 at 01:18:09PM -0700
References: <[email protected]>
Mime-Version: 1.0
Content-Type: multipart/signed; boundary=zq44+AAfm4giZpo5; micalg=pgp-md5;
       protocol="application/pgp-signature"
X-Mailer: Mutt 0.95.6i
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN


--zq44+AAfm4giZpo5
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable

On Thu, Jul 15, 1999 at 01:18:09PM -0700, Joost Houwen wrote:

> I am wondering if someone can clarify the following for me (I have
> checked the FAQ and list archives but no luck.)
>=20
> Many _current_ security resources recommend the wuarchive-ftp 2.4
> (ftp://wuarchive.wustl.edu/packages/wuarchive-ftpd/), but in the wu-ftp
> 2.5.0 release announcement it is strongly recommended to upgrade.  This
> makes sense to me because the wustl archive files are circa 1997.
>=20
> Are there specific issues that the "wuarchive" version has?  The recent
> CERT bulletin did not specifically address this issue, but focused on the
> problems with 2.4.2 and others.  I have checked a variety of the
> vulnerability databases, but there seems to be nothing specific.
>=20
> In general it seems to me a very good idea to use 2.5.0, but I am
> wondering if there are any specific security vulnerability issues which
> clearly make the case for upgrading?=20

Any resource which does not recommend 2.5.0 is NOT a current security
resource.  At a minimum, you should be running 2.4.2-beta-18-VR12 as is
stated in the latest CERT advisory.  If you find a site recommending
anything prior to 2.4.2-beta-18-VR12, you should notify the site maintainer
that their information is out-of-date and misleading.

For a full history of the security recommendations, please read the CERT
archives at http://www.CERT.org/

TO BE PERFECTLY CLEAR:

ANYONE RUNNING VERSION 2.4 OF THE DAEMON SHOULD EITHER UPGRADE OR
DISCONTINUE FTP SERVICES **IMMEDEATELY**.

Anyone running ANY version of the daemon prior to those recommended in the
last CERT advisory (CA-99-02) should immedeately upgrade or discontinue all
FTP services.

--=20

Gregory A Lundberg              WU-FTPD Development Group
1441 Elmdale Drive              [email protected]
Kettering, OH 45409-1615 USA    1-800-809-2195

--zq44+AAfm4giZpo5
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5

iQB1AwUBN446UQ2nXFkJc83RAQEm2gMAxY/xHYQn1i0Y/OAtGleRiN8pxYjgT6rX
mX7KVL3ckX7lvhmqnHZGnbs4wYmd1zn+yBuOLxf1Yyqq4BUP4sZSpr48D1lWnJ/r
Yv7ZZG6tzbLOxF1rLh0hNHPLev8TStM5
=dYlA
-----END PGP SIGNATURE-----

--zq44+AAfm4giZpo5--

From [email protected]  Thu Jul 15 18:52:39 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id SAA11957
       for <[email protected]>; Thu, 15 Jul 1999 18:52:38 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id SAA04786;
       Thu, 15 Jul 1999 18:53:08 -0500 (CDT)
Received: from fog.ccsf.cc.ca.us ([email protected] [147.144.1.3])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id SAA24085
       for <[email protected]>; Thu, 15 Jul 1999 18:50:29 -0500 (CDT)
Received: from sol.ccsf.cc.ca.us (sol.ccsf.cc.ca.us [147.144.1.211])
       by fog.ccsf.cc.ca.us (8.8.6 (PHNE_17135)/8.8.6) with SMTP id QAA03417;
       Thu, 15 Jul 1999 16:50:24 -0700 (PDT)
Received: from localhost by sol.ccsf.cc.ca.us (SMI-8.6/SMI-SVR4)
       id QAA05543; Thu, 15 Jul 1999 16:50:23 -0700
Message-Id: <[email protected]>
Date: Thu, 15 Jul 1999 16:50:22 -0700 (PDT)
Reply-To: "Joe R. Jah" <[email protected]>
Sender: [email protected]
From: "Joe R. Jah" <[email protected]>
To: Phil Schwan <[email protected]>
Cc: Alan Olsen <[email protected]>,
       WU-FTPD Discussion List <[email protected]>,
       WU-FTPD Development Group <[email protected]>
Subject: Re: Log Analysis Tools for Wu-FTP?
In-Reply-To: <[email protected]>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN

On Thu, 15 Jul 1999, Phil Schwan wrote:

> Date: Thu, 15 Jul 1999 14:58:34 -0400
> From: Phil Schwan <[email protected]>
> To: "Joe R. Jah" <[email protected]>,
>     Alan Olsen <[email protected]>,
>     WU-FTPD Discussion List <[email protected]>,
>     WU-FTPD Development Group <[email protected]>
> Subject: Re: Log Analysis Tools for Wu-FTP?
>
> Actually, now my problems have shifted to InterNIC :).  I left CMU
> months ago, but since they still haven't updated my domain record, I
> can't point you all to a working server.  Soon, perhaps.
>
> In the meantime, I've put the latest version in
> ftp://carissimi.coda.cs.cmu.edu/pub/phil.  Don't expect it to stay
> there, but hopefully I can get internic's heads out of their
> collective arses and find someplace stable.
>
> As for inclusion in the base release, that would be great;
> unfortunately, it should probably wait until your next release, as I'm
> simply too busy right now to support it.
>
> Best wishes--
>
> -Phil

Thank you very much Phil for your great contribution to bringing some
sanity to the log analysis;)

One question:

When I run the following command:

  xferstats +H +B "Jul 14 00:00:00 1999" +E "Jul 14 09:00:00 1999"

I expect to have only the statistics up to 9:00 AM created, but I receive
the statistics for the entire day.  What am I missing?  I run V2.13, but I
have read the ChangeLog for V2.14 and did not see any mention of it, so I
assume 2.14 behaves the same way.

Best regards,

Joe

    _/   _/_/_/       _/            ____________    __o
    _/   _/   _/      _/       ______________     _-\<,_
_/  _/   _/_/_/   _/  _/                   ......(_)/ (_)
 _/_/ oe _/   _/.  _/_/ ah       [email protected]



From [email protected]  Thu Jul 15 23:31:00 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id XAA13855
       for <[email protected]>; Thu, 15 Jul 1999 23:30:59 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id XAA18146;
       Thu, 15 Jul 1999 23:31:30 -0500 (CDT)
Received: from treefern.apana.org.au (treefern.apana.org.au [203.14.152.50])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id XAA27624
       for <[email protected]>; Thu, 15 Jul 1999 23:30:57 -0500 (CDT)
Received: from localhost (cdewick@localhost)
       by treefern.apana.org.au (8.9.3/8.9.3) with ESMTP id OAA07155;
       Fri, 16 Jul 1999 14:30:29 +1000 (EST)
Message-Id: <[email protected]>
Date: Fri, 16 Jul 1999 14:30:29 +1000 (EST)
Reply-To: [email protected]
Sender: [email protected]
From: Craig Dewick <[email protected]>
To: Gregory A Lundberg <[email protected]>
Cc: WUFTPD Discussion List <[email protected]>
Subject: Re: unusual config problem
In-Reply-To: <[email protected]>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN

Hi Greg,

> > I'm still running the vr17 release (I'll upgrade later today), however
> > I've been having a small apparent problem with the config.
>
> :P

I've got the source for 2.5.0 here now. 8-) Just don't currently have the
time to build and install it. Hopefully something this weekend...

> Legacy has it that entering username@ is good enough if you mean your email
> address is username@<clienthost> .. and, once upon a time, it may have
> been.  Nowadays, <clienthost> is rarely your mailhost or even has a proper
> MX.  But we're stuck with the assumption.

Agreed.

> The RFC 822 check does not (in fact, cannot) guarentee the email address
> entered is valid or correct.  All it does is make a (rather lame) attempt
> to be sure the email address looks even remotely like it could possibly be
> a usable email address.  *blink*

However the mere fact that I've enabled rfc-822 enforcement has reduced
the load on this machine (and my PPP link) considerably, so it shows that
there are still plenty of people trying to access using equally-lame
non-complient strings for the anonymous password.

I guess what could be done is enforce domain resolvability *plus* rfc-822
complience, whereby a domain name must be in the DNS, and must correctly
match the IP address from which the packets have actually originated. Of
course this is open to fraudulence too, but at least this would act as a
double-discouragement to amateur hacking attempts, etc.

> > Also, can I use wildcards in the email spec for the deny-email lines? If
> > yes, then could I use something like
> >
> > deny-email IE?0User@
> >
> > instead of one line for each variation of the IE version number?
>
> You can use a full regular expression:
>
> deny-email (IE([2-5]0)?user)|(mozilla)@

I didn't realise that I could do this. Thanks for pointing it out.

Regards,

Craig.





From [email protected]  Fri Jul 16 09:08:04 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id JAA17130
       for <[email protected]>; Fri, 16 Jul 1999 09:08:04 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id JAA26269;
       Fri, 16 Jul 1999 09:07:06 -0500 (CDT)
Received: from mail.vr.net ([email protected] [205.133.13.8])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id JAA19373
       for <[email protected]>; Fri, 16 Jul 1999 09:01:15 -0500 (CDT)
Received: (from lundberg@localhost)
       by mail.vr.net (8.9.3/8.9.3) id JAA02988;
       Fri, 16 Jul 1999 09:59:51 -0400
Message-Id: <[email protected]>
Date: Fri, 16 Jul 1999 09:59:51 -0400
Reply-To: Gregory A Lundberg <[email protected]>
Sender: [email protected]
From: Gregory A Lundberg <[email protected]>
To: Craig Dewick <[email protected]>
Cc: WUFTPD Discussion List <[email protected]>
Subject: Re: unusual config problem
In-Reply-To: <[email protected]>; from Craig Dewick on Fri, Jul 16, 1999 at 02:30:29PM +1000
References: <[email protected]> <[email protected]>
Mime-Version: 1.0
Content-Type: multipart/signed; boundary="SWTRyWv/ijrBap1m"; micalg=pgp-md5;
       protocol="application/pgp-signature"
X-Mailer: Mutt 0.95.6i
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN


--SWTRyWv/ijrBap1m
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable

On Fri, Jul 16, 1999 at 02:30:29PM +1000, Craig Dewick wrote:

> However the mere fact that I've enabled rfc-822 enforcement has reduced
> the load on this machine (and my PPP link) considerably, so it shows that
> there are still plenty of people trying to access using equally-lame
> non-complient strings for the anonymous password.

To be honest, I find it hard to believe that rfc-822 had anything to do
with it.

Most likely, you made other changes as well.  Or you were under attack and
the script kiddies finally decided to move on to greener pastures (I see
that happen a lot here).

> I guess what could be done is enforce domain resolvability *plus* rfc-822
> complience, whereby a domain name must be in the DNS, and must correctly
> match the IP address from which the packets have actually originated. Of
> course this is open to fraudulence too, but at least this would act as a
> double-discouragement to amateur hacking attempts, etc.

You might check ftp.win.ne.jp.  Ayamura has a patch which does what you
want and he's probably got it on his server.  Browse arround in the area
near the wu-ftpd mirror.

Personally, I think it's a waste of time (yours, and the daemon's) to worry
about it.  There's no good way to verify the address entered is a real
email address short of sending an email off and waiting a week or so to see
if a bounce comes back (if it's a batched UUCP address, you might want to
wait a month or two just to be sure).

--=20

Gregory A Lundberg              WU-FTPD Development Group
1441 Elmdale Drive              [email protected]
Kettering, OH 45409-1615 USA    1-800-809-2195

--SWTRyWv/ijrBap1m
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5

iQB1AwUBN48swg2nXFkJc83RAQGOTgL+Ler5OHE4tBk0k+RzunXQ+iEuDNDLayh4
JCFgHn+rpNbNcCvsBo6ZgIN4G2fuefYUGLvcQ8uiomrb1BeGFBVkYhmWuY8nVfQj
po4jbDu3A3wyLg01hNikQpm4Xsbc88fT
=AGWV
-----END PGP SIGNATURE-----

--SWTRyWv/ijrBap1m--

From [email protected]  Fri Jul 16 10:01:51 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id KAA17551
       for <[email protected]>; Fri, 16 Jul 1999 10:01:50 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id KAA27703;
       Fri, 16 Jul 1999 10:02:22 -0500 (CDT)
Received: from mail.vr.net ([email protected] [205.133.13.8])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id JAA00176
       for <[email protected]>; Fri, 16 Jul 1999 09:56:34 -0500 (CDT)
Received: (from lundberg@localhost)
       by mail.vr.net (8.9.3/8.9.3) id KAA03545;
       Fri, 16 Jul 1999 10:55:02 -0400
Message-Id: <[email protected]>
Date: Fri, 16 Jul 1999 10:55:02 -0400
Reply-To: Gregory A Lundberg <[email protected]>
Sender: [email protected]
From: Gregory A Lundberg <[email protected]>
To: jamie <[email protected]>
Cc: WU-FTPD Discussion List <[email protected]>
Subject: Re: french character upload
In-Reply-To: <[email protected]>; from jamie on Thu, Jul 15, 1999 at 02:36:46PM -0400
References: <[email protected]>
Mime-Version: 1.0
Content-Type: multipart/signed; boundary="0OAP2g/MAC+5xKAE"; micalg=pgp-md5;
       protocol="application/pgp-signature"
X-Mailer: Mutt 0.95.6i
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN


--0OAP2g/MAC+5xKAE
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable

On Thu, Jul 15, 1999 at 02:36:46PM -0400, jamie wrote:

> Has anyone had experience with adding to the filter:
>=20
> path-filter  guest      /etc/pathmsg  ^[-A-Za-z0-9_\.]*$  ^\.  ^-=20
>=20
> basically one of my french users wants to be able to upload an accent
> aigue on the e.  ( chimpanz\351e )
>=20
> ver: BeroFTPD 1.3.3

If the regular expresion library allows escaped character, you might try
adding what you need to the list of allowed characters in the basename.
Otherwise you might try using a French editor, and insterting the 8-bit
code you want to allow.

For example, to allow the character @ in a filename, I'd say:
   path-filter guest /etc/pathmsg ^[-A-Za-x0-9_\.@]*$ ^/. ^-

--=20

Gregory A Lundberg              WU-FTPD Development Group
1441 Elmdale Drive              [email protected]
Kettering, OH 45409-1615 USA    1-800-809-2195

--0OAP2g/MAC+5xKAE
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5

iQB1AwUBN485sQ2nXFkJc83RAQEuZAL/bN9sb45+rhnsEU42yIU0iBZxFVBUNd/X
MQ5801m4j6lEKy+LsKu43ksZf7uaHqs0jfCfkXzLLBA3i4dkJnfFyOgRI0vtjXta
71T20FDq4FxUe8+pN4YMkWzktRfoJkYc
=GfrX
-----END PGP SIGNATURE-----

--0OAP2g/MAC+5xKAE--

From [email protected]  Fri Jul 16 10:40:33 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id KAA17838
       for <[email protected]>; Fri, 16 Jul 1999 10:40:32 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id KAA25400;
       Fri, 16 Jul 1999 10:41:01 -0500 (CDT)
Received: from www.maned.com (www.maned.com [199.224.118.11])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id KAA31906
       for <[email protected]>; Fri, 16 Jul 1999 10:40:39 -0500 (CDT)
Received: from [199.224.118.245] ([199.224.118.245])
       by www.maned.com (8.8.5/8.8.5) with ESMTP id LAA23383
       for <[email protected]>; Fri, 16 Jul 1999 11:40:08 -0400 (EDT)
Message-Id: <v04020a01b3b4ffb896f1@[199.224.118.245]>
Date: Fri, 16 Jul 1999 11:40:06 -0400
Reply-To: [email protected]
Sender: [email protected]
From: "Thomas R. Kimpton" <[email protected]>
To: WUFTPD Discussion List <[email protected]>
Subject: Re: unusual config problem
In-Reply-To: <[email protected]>
References:
<[email protected]>; from
Craig Dewick on Fri, Jul 16, 1999 at 02:30:29PM +1000
<[email protected]>
<[email protected]>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
X-Sender: [email protected]
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN

>Personally, I think it's a waste of time (yours, and the daemon's) to worry
>about it.  There's no good way to verify the address entered is a real
>email address short of sending an email off and waiting a week or so to see
>if a bounce comes back (if it's a batched UUCP address, you might want to
>wait a month or two just to be sure).

If you wanted to check my address, for example <[email protected]>
you could get the MX record for the domain, then connect to the mail
port (numbered lines are responses from the mail daemon, un-numbered
are from the verifying side):

220 www.maned.com ESMTP Sendmail 8.8.5/8.8.5; Fri, 16 Jul 1999 11:29:06 -0400 (EDT)
helo goober.maned.com
250 www.maned.com Hello goober.maned.com [199.224.118.245], pleased to meet you
mail from:<[email protected]>
250 <[email protected]>... Sender ok
rcpt to:<[email protected]>
250 <[email protected]>... Recipient ok
rset
250 Reset state
quit

220 www.maned.com ESMTP Sendmail 8.8.5/8.8.5; Fri, 16 Jul 1999 11:29:06 -0400 (EDT)
helo goober.maned.com
250 www.maned.com Hello goober.maned.com [199.224.118.245], pleased to meet you
mail from:<[email protected]>
250 <[email protected]>... Sender ok
rcpt to:<[email protected]>
550 <[email protected]>... User unknown
rset
250 Reset state
quit


I *think* that would be a quick and dirty verification.

Tom.
Oz:  So, do you guys steal weapons from the Army a lot?
Willow:  Well, we don't have cable, so we have to make
our own fun.
-- Innocence - Buffy the Vampire Slayer

From [email protected]  Fri Jul 16 11:12:48 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id LAA18054
       for <[email protected]>; Fri, 16 Jul 1999 11:12:47 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id LAA25184;
       Fri, 16 Jul 1999 11:13:19 -0500 (CDT)
Received: from mail.vr.net ([email protected] [205.133.13.8])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id LAA26992
       for <[email protected]>; Fri, 16 Jul 1999 11:06:48 -0500 (CDT)
Received: (from lundberg@localhost)
       by mail.vr.net (8.9.3/8.9.3) id MAA04164;
       Fri, 16 Jul 1999 12:06:38 -0400
Message-Id: <[email protected]>
Date: Fri, 16 Jul 1999 12:06:37 -0400
Reply-To: Gregory A Lundberg <[email protected]>
Sender: [email protected]
From: Gregory A Lundberg <[email protected]>
To: "Thomas R. Kimpton" <[email protected]>
Cc: WUFTPD Discussion List <[email protected]>
Subject: Re: unusual config problem
In-Reply-To: <v04020a01b3b4ffb896f1@[199.224.118.245]>; from Thomas R. Kimpton on Fri, Jul 16, 1999 at 11:40:06AM -0400
References: <[email protected]>; <[email protected]> <[email protected]> <[email protected]> <v04020a01b3b4ffb896f1@[199.224.118.245]>
Mime-Version: 1.0
Content-Type: multipart/signed; boundary=24zk1gE8NUlDmwG9; micalg=pgp-md5;
       protocol="application/pgp-signature"
X-Mailer: Mutt 0.95.6i
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN


--24zk1gE8NUlDmwG9
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable

On Fri, Jul 16, 1999 at 11:40:06AM -0400, Thomas R. Kimpton wrote:

> >Personally, I think it's a waste of time (yours, and the daemon's) to wo=
rry
> >about it.  There's no good way to verify the address entered is a real
> >email address short of sending an email off and waiting a week or so to =
see
> >if a bounce comes back (if it's a batched UUCP address, you might want to
> >wait a month or two just to be sure).
>=20
> If you wanted to check my address, for example <[email protected]>
> you could get the MX record for the domain, then connect to the mail
> port (numbered lines are responses from the mail daemon, un-numbered
> are from the verifying side):

An MX is not strictly required for mail delivery.  And if you find one, it
does not tell you the server will know anything at all about the address
you're interested in .. it may just be a relay.

Well-managed mail hosts do not allow VRFY in the SMTP conversation.  So
you'd have to do a 'fake message' .. send a MAIL and RCPT.  I don't know
about most mail admins, but if I started seeing a large number of
NULL-QUEUE messages, I'd investigate.  And I'd probably just firewall your
FTP server away from my mail server rather than waste the time ...

My opinion is this: anonymous is anonymous.  Courtesy says you will give me
your email address when using my FTP server anonymously, but courtesy
cannot be enforced.  I don't care what you say, just so you send a PASS
(because it's required after USER and I *will*not* run an FTP server which
does not require USER).

Most of the people giving bad 'passwords' for anonymous access fall into
two classes:

- Windows users (including the odd Mac or X-Windows person)

- Poor typists (isn't that a requirment to be a sysadmin?)

There are far better ways to fend of the undesirables than pissing off your
legitemate users.

--=20

Gregory A Lundberg              WU-FTPD Development Group
1441 Elmdale Drive              [email protected]
Kettering, OH 45409-1615 USA    1-800-809-2195

--24zk1gE8NUlDmwG9
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5

iQB1AwUBN49KdA2nXFkJc83RAQFPJwMAlkUccCbtgQPje+BYhKduKgHDJrfRqopV
Xet/8dvYePNXGtfX3bUX5q4GglKVHMI2QF5mV9G/4PHAd3kHfc2pXXp2bKNSLv4E
zo1/ixgTL8puaOE04A+IKSAJ2L7HGkr0
=v5sz
-----END PGP SIGNATURE-----

--24zk1gE8NUlDmwG9--

From [email protected]  Fri Jul 16 11:53:52 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id LAA18307
       for <[email protected]>; Fri, 16 Jul 1999 11:53:52 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id LAA26404;
       Fri, 16 Jul 1999 11:54:23 -0500 (CDT)
Received: from gw1.bfg.com (gateway.bfg.com [131.187.253.2])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id LAA23543
       for <[email protected]>; Fri, 16 Jul 1999 11:49:32 -0500 (CDT)
Received: (from uucp@localhost)
       by gw1.bfg.com (8.9.3/8.9.3) id MAA19081;
       Fri, 16 Jul 1999 12:48:40 -0400 (EDT)
Received: from ns1.bfg.com(192.73.67.20) by gw1.bfg.com via smap (V2.1)
       id sma017755; Fri, 16 Jul 99 12:47:45 -0400
Received: from localhost (keller@localhost)
       by ns1.bfg.com (8.9.3/8.9.3) with ESMTP id MAA23233;
       Fri, 16 Jul 1999 12:47:32 -0400 (EDT)
Message-Id: <[email protected]>
Date: Fri, 16 Jul 1999 12:47:32 -0400 (EDT)
Reply-To: [email protected]
Sender: [email protected]
From: Ted Keller <[email protected]>
To: Gregory A Lundberg <[email protected]>
Cc: "Thomas R. Kimpton" <[email protected]>,
       WUFTPD Discussion List <[email protected]>
Subject: Re: unusual config problem
In-Reply-To: <[email protected]>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN

I agree with Gregory here....  My firewall answers ok to everyone - and
simply relays the message to the real internal server.

Additionally, I've noted that apache proxy servers (others may do the
same) use anonymous@ as the e-mail address.  It's not even real.  The
domain name is not even included.  But - it does satisfy the ftp daemons
desire for some kind of an address.

ted keller


On Fri, 16 Jul 1999, Gregory A Lundberg wrote:

> On Fri, Jul 16, 1999 at 11:40:06AM -0400, Thomas R. Kimpton wrote:
>
> > >Personally, I think it's a waste of time (yours, and the daemon's) to worry
> > >about it.  There's no good way to verify the address entered is a real
> > >email address short of sending an email off and waiting a week or so to see
> > >if a bounce comes back (if it's a batched UUCP address, you might want to
> > >wait a month or two just to be sure).
> >
> > If you wanted to check my address, for example <[email protected]>
> > you could get the MX record for the domain, then connect to the mail
> > port (numbered lines are responses from the mail daemon, un-numbered
> > are from the verifying side):
>
> An MX is not strictly required for mail delivery.  And if you find one, it
> does not tell you the server will know anything at all about the address
> you're interested in .. it may just be a relay.
>
> Well-managed mail hosts do not allow VRFY in the SMTP conversation.  So
> you'd have to do a 'fake message' .. send a MAIL and RCPT.  I don't know
> about most mail admins, but if I started seeing a large number of
> NULL-QUEUE messages, I'd investigate.  And I'd probably just firewall your
> FTP server away from my mail server rather than waste the time ...
>
> My opinion is this: anonymous is anonymous.  Courtesy says you will give me
> your email address when using my FTP server anonymously, but courtesy
> cannot be enforced.  I don't care what you say, just so you send a PASS
> (because it's required after USER and I *will*not* run an FTP server which
> does not require USER).
>
> Most of the people giving bad 'passwords' for anonymous access fall into
> two classes:
>
>  - Windows users (including the odd Mac or X-Windows person)
>
>  - Poor typists (isn't that a requirment to be a sysadmin?)
>
> There are far better ways to fend of the undesirables than pissing off your
> legitemate users.
>
> --
>
> Gregory A Lundberg              WU-FTPD Development Group
> 1441 Elmdale Drive              [email protected]
> Kettering, OH 45409-1615 USA    1-800-809-2195
>


From [email protected]  Fri Jul 16 12:11:07 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id MAA18476
       for <[email protected]>; Fri, 16 Jul 1999 12:11:07 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id MAA24837;
       Fri, 16 Jul 1999 12:11:41 -0500 (CDT)
Received: from ljcqs016.cnf.com ([205.185.108.239])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id MAA18447
       for <[email protected]>; Fri, 16 Jul 1999 12:08:08 -0500 (CDT)
Received: from cnfvs008.cnf.com (localhost [127.0.0.1])
       by ljcqs016.cnf.com (8.8.7/8.8.7) with ESMTP id KAA18954;
       Fri, 16 Jul 1999 10:06:19 -0700 (PDT)
Received: by cnfvs008.cnf.com with Internet Mail Service (5.5.2448.0)
       id <N5DA9J9A>; Fri, 16 Jul 1999 10:06:17 -0700
Message-Id: <[email protected]>
Date: Fri, 16 Jul 1999 10:06:10 -0700
Reply-To: [email protected]
Sender: [email protected]
From: "Peniak, Rick - MLG" <[email protected]>
To: "'[email protected]'" <[email protected]>,
       Gregory A Lundberg
        <[email protected]>
Cc: "Thomas R. Kimpton" <[email protected]>,
       WUFTPD Discussion List
        <[email protected]>
Subject: class in ftpaccess and other question
MIME-Version: 1.0
Content-Type: text/plain
X-Mailer: Internet Mail Service (5.5.2448.0)
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN

Hi All,

I have read the man page for ftpaccess, but I'm still confused about
classes. I have the default line in my ftpaccess file, ie:

class   all   real,guest,anonymous  *

and have on idea how to, say, deny user X from being able to access the ftp
server, or deny anonymous users from being able to access the ftp server (I
tried removing 'anonymous' from the comma separated list and it didn't do
anything). What exactly is the class directive for in lamens terms?

I understand all other parts of the file.

Question #2:

Management at my company has forced the installation of wu-ftpd before I
started. My boss, with whom I work directly, wants me to find out all the
benefits of wu-ftpd in terms of security over the vanilla ftpd that came
with the HPUX10.20 server I am working on. I looked and couldn't find any
documentation regarding this. If someone could point me in the right
direction I would greatly appreciate it.

Thanks for all your help.


From [email protected]  Fri Jul 16 12:37:04 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id MAA18603
       for <[email protected]>; Fri, 16 Jul 1999 12:37:04 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id MAA22029;
       Fri, 16 Jul 1999 12:37:38 -0500 (CDT)
Received: from mail.vr.net ([email protected] [205.133.13.8])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id MAA30099
       for <[email protected]>; Fri, 16 Jul 1999 12:34:26 -0500 (CDT)
Received: (from lundberg@localhost)
       by mail.vr.net (8.9.3/8.9.3) id NAA04889;
       Fri, 16 Jul 1999 13:34:19 -0400
Message-Id: <[email protected]>
Date: Fri, 16 Jul 1999 13:34:18 -0400
Reply-To: Gregory A Lundberg <[email protected]>
Sender: [email protected]
From: Gregory A Lundberg <[email protected]>
To: "Peniak, Rick - MLG" <[email protected]>
Cc: WU-FTPD Discussion List <[email protected]>
Subject: Re: class in ftpaccess and other question
In-Reply-To: <[email protected]>; from Peniak, Rick - MLG on Fri, Jul 16, 1999 at 10:06:10AM -0700
References: <[email protected]>
Mime-Version: 1.0
Content-Type: multipart/signed; boundary=IS0zKkzwUGydFO0o; micalg=pgp-md5;
       protocol="application/pgp-signature"
X-Mailer: Mutt 0.95.6i
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN


--IS0zKkzwUGydFO0o
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable

On Fri, Jul 16, 1999 at 10:06:10AM -0700, Peniak, Rick - MLG wrote:

> I have read the man page for ftpaccess, but I'm still confused about
> classes. I have the default line in my ftpaccess file, ie:
>=20
> class   all   real,guest,anonymous  *
>=20
> and have on idea how to, say, deny user X from being able to access the
> ftp server, or deny anonymous users from being able to access the ftp
> server (I tried removing 'anonymous' from the comma separated list and it
> didn't do anything). What exactly is the class directive for in lamens
> terms?

A way of assigning a handle to a group of users.  That handle is used
elsewhere to control some security features.

Access to the daemon is not allowed unless the user can be classified in
this way.

Of course, as you're using it, it's not much of a classification.
Consider, though, if you have an Internet connection, a proxy to the LAN,
and use the reserved Class-A network 10 for your LAN.  Then you could say:

 class inside real,guest,anonymous 10.0.0.0/8
 class outside real,guest,anonymous !10.0.0.0/8

Now you could set different rules (user limits, etc) based upon whether the
user was from inside the proxy or outside.

> Management at my company has forced the installation of wu-ftpd before I
> started. My boss, with whom I work directly, wants me to find out all the
> benefits of wu-ftpd in terms of security over the vanilla ftpd that came
> with the HPUX10.20 server I am working on. I looked and couldn't find any
> documentation regarding this. If someone could point me in the right
> direction I would greatly appreciate it.

I doubt such a document exists.  The old BSD in.ftpd is so bad I don't
think anyone would seriously consider wasting their time trying to describe
HOW bad it is for anything but the most pedestrian use.

To be fair, though, if all you need is anonymous FTP.  And you're not
connected to the Internet.  And you don't have any local users on the Unix
box running the daemon.  And nobody on your LAN can use any Web or FTP
client.  Then the daemon which came with the OS might be secure enough for
your purposes.  Note, I said "might".

--=20

Gregory A Lundberg              WU-FTPD Development Group
1441 Elmdale Drive              [email protected]
Kettering, OH 45409-1615 USA    1-800-809-2195

--IS0zKkzwUGydFO0o
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5

iQB1AwUBN49fBg2nXFkJc83RAQHk2gL/W1BGEJvgSBysX0ADzV+1dX8zP+kJkgBA
mu6oM9TQMFNPWs/7Vh5Mo+kEkjGMPP8XdRqhXox36roN4w5IxdIa7wRwTtu8Sz1K
QD2Su7zcRcbCwwiKv/enClPZtCDOhRQY
=6b9f
-----END PGP SIGNATURE-----

--IS0zKkzwUGydFO0o--

From [email protected]  Fri Jul 16 14:33:07 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id OAA19580
       for <[email protected]>; Fri, 16 Jul 1999 14:33:07 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id OAA18378;
       Fri, 16 Jul 1999 14:33:39 -0500 (CDT)
Received: from gatekeep.ti.com (gatekeep.ti.com [192.94.94.61])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id OAA29602
       for <[email protected]>; Fri, 16 Jul 1999 14:29:25 -0500 (CDT)
Received: from spanky.dal.asp.ti.com ([172.24.154.20]) by gatekeep.ti.com (8.8.8) with ESMTP id OAA06188; Fri, 16 Jul 1999 14:28:54 -0500 (CDT)
Received: from pavis.asic.sc.ti.com (pavis.asic.sc.ti.com [128.247.100.46])
       by spanky.dal.asp.ti.com (8.8.8+Sun/8.8.8/FL-ASP-1.13) with ESMTP id OAA22223;
       Fri, 16 Jul 1999 14:28:53 -0500 (CDT)
Received: (from bobl@localhost) by pavis.asic.sc.ti.com (8.8.6 (PHNE_17135)/8.7.1) id OAA28040; Fri, 16 Jul 1999 14:28:53 -0500 (CDT)
Message-Id: <[email protected]>
Date: Fri, 16 Jul 1999 14:28:53 CDT
Reply-To: [email protected] (Bob Luckin)
Sender: [email protected]
From: Bob Luckin <[email protected]>
To: [email protected]
Cc: [email protected], [email protected]
Subject: Re: class in ftpaccess and other question
In-Reply-To: <[email protected]>; from "Gregory A Lundberg" at Jul 16, 99 1:34 pm
X-MIMI-Options: HEADERS TI2
X-Mailer: Elm [revision: 212.4]
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN

> > Management at my company has forced the installation of wu-ftpd before I
> > started. My boss, with whom I work directly, wants me to find out all the
> > benefits of wu-ftpd in terms of security over the vanilla ftpd that came
> > with the HPUX10.20 server I am working on. I looked and couldn't find any
> > documentation regarding this. If someone could point me in the right
> > direction I would greatly appreciate it.
>
> I doubt such a document exists.  The old BSD in.ftpd is so bad I don't
> think anyone would seriously consider wasting their time trying to describe
> HOW bad it is for anything but the most pedestrian use.
>
> To be fair, though, if all you need is anonymous FTP.  And you're not
> connected to the Internet.  And you don't have any local users on the Unix
> box running the daemon.  And nobody on your LAN can use any Web or FTP
> client.  Then the daemon which came with the OS might be secure enough for
> your purposes.  Note, I said "might".

You missed out the logging feature.  :-)  The reason I originally installed
wu-ftpd was to see what files were being pulled by whom and when.  It allowed
me to get some handle on which programs were popular, and which releases were
so little in demand that I could archive them off the site to save space.
Plus, if a developer discovered a serious bug, I could give him a list of
all the users who had pulled that version, so he could contact them.
(I was running a site used purely for internal software releases at the time).

Cheers, Bob
--
Bob Luckin      [email protected]      "Coder, adapt.  FTP Ada, redo C"

From [email protected]  Fri Jul 16 16:56:14 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id QAA20715
       for <[email protected]>; Fri, 16 Jul 1999 16:56:13 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id QAA30984;
       Fri, 16 Jul 1999 16:56:46 -0500 (CDT)
Received: from oscar.tvdata.com (oscar.tvdata.com [204.97.140.252])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id QAA27971
       for <[email protected]>; Fri, 16 Jul 1999 16:51:12 -0500 (CDT)
Received: (from daemon@localhost) by oscar.tvdata.com (8.6.9/8.6.9) id RAA01956 for <[email protected]>; Fri, 16 Jul 1999 17:50:49 -0400
Received: from emmy.tvdata.com(172.16.10.253), claiming to be "emmy"
via SMTP by oscar.tvdata.com, id smtpdAAAa01949; Fri Jul 16 21:50:39 1999
Received: by emmy (5.0/SMI-SVR4)
       id AA02843; Fri, 16 Jul 1999 17:50:38 +0500
Message-Id: <v0421011cb3b554ac52cc@[172.16.20.81]>
Date: Fri, 16 Jul 1999 17:50:34 -0400
Reply-To: [email protected]
Sender: [email protected]
From: Brett Goldstock <[email protected]>
To: [email protected]
Subject: Problem with users connecting
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii" ; format="flowed"
X-Sender: [email protected]
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN

I've recently (this week) started fielding calls from some of my
users who are experiencing problems connecting to my ftp server. I
was until recently running one of the VR versions, but now I'm
current on 2.5.0.

The symptom is that the user can connect, but when a download is
initiated, nothing happens. On my end, a check of the xferlog shows a
zero byte incomplete download. This is for the most part users who
are using a gui ftp client under Windows or Macintosh. Sometimes its
a web browser, sometimes just an ftp client.

By no means is it happening to most of my users - it's perhaps 6-10
out of about 1200 regular users. But it's odd that it suddenly became
a problem. There seems to be no geographic correlation either.
They're from Alaska, Ohio, Alberta, Mississippi and other places.

I really doubt it has anything to do with wu-ftpd, but I thought I
would mention it to see if I could get any helpful suggestions.

thanks
-Brett

|Brett M. Goldstock                               [email protected]|
|Senior Technical Analyst/Sys Admin          http://www.tvdata.com|
|TVData                                               800/833-9581|
|                "We tell the world what's on TV."                |

From [email protected]  Fri Jul 16 22:19:57 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id WAA08542
       for <[email protected]>; Fri, 16 Jul 1999 22:19:56 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id WAA09953;
       Fri, 16 Jul 1999 22:20:46 -0500 (CDT)
Received: from mail.vr.net ([email protected] [205.133.13.8])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id WAA28625
       for <[email protected]>; Fri, 16 Jul 1999 22:17:31 -0500 (CDT)
Received: (from lundberg@localhost)
       by mail.vr.net (8.9.3/8.9.3) id XAA09464;
       Fri, 16 Jul 1999 23:17:27 -0400
Message-Id: <[email protected]>
Date: Fri, 16 Jul 1999 23:17:27 -0400
Reply-To: Gregory A Lundberg <[email protected]>
Sender: [email protected]
From: Gregory A Lundberg <[email protected]>
To: Brett Goldstock <[email protected]>
Cc: WU-FTPD Discussion List <[email protected]>
Subject: Re: Problem with users connecting
In-Reply-To: <v0421011cb3b554ac52cc@[172.16.20.81]>; from Brett Goldstock on Fri, Jul 16, 1999 at 05:50:34PM -0400
References: <v0421011cb3b554ac52cc@[172.16.20.81]>
Mime-Version: 1.0
Content-Type: multipart/signed; boundary=AqsLC8rIMeq19msA; micalg=pgp-md5;
       protocol="application/pgp-signature"
X-Mailer: Mutt 0.95.6i
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN


--AqsLC8rIMeq19msA
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable

On Fri, Jul 16, 1999 at 05:50:34PM -0400, Brett Goldstock wrote:

> I've recently (this week) started fielding calls from some of my users
> who are experiencing problems connecting to my ftp server. I was until
> recently running one of the VR versions, but now I'm current on 2.5.0.
>=20
> The symptom is that the user can connect, but when a download is
> initiated, nothing happens. On my end, a check of the xferlog shows a
> zero byte incomplete download. This is for the most part users who are
> using a gui ftp client under Windows or Macintosh. Sometimes its a web
> browser, sometimes just an ftp client.
>=20
> By no means is it happening to most of my users - it's perhaps 6-10 out
> of about 1200 regular users. But it's odd that it suddenly became a
> problem. There seems to be no geographic correlation either.   They're
> from Alaska, Ohio, Alberta, Mississippi and other places.
>=20
> I really doubt it has anything to do with wu-ftpd, but I thought I would
> mention it to see if I could get any helpful suggestions.

Do you have a client consistently having the problem?  If so, have them try
downloading from ftp.vr.net and ftp.wu-ftpd.org.  Both are running 2.5.0;
vr.net from inetd and wu-ftpd.org as a standalone.  That will tell us if
it's something consistent with 2.5.0 or their software/network.

You might also attempt to grab a tcpdump/snoop of one of their failing
sessions with your server.  At the same time, check your system logs for
messages which might be related.

If you would like, I can test against your server with IE5 and a Unix ftp
client.  Perhaps I'll have a problem or will be able to see something in
the way your deamon acts which might give a clue.

The only ongoing problem I'm currently seeing is there is a class of lamely
coded proxy/firewalls out there which is causing instances of the daemon
(only on wu-ftpd.org) to hang arround for indefinite periods of time.
Someone sent me a TCP keepalive patch for the daemon and I've tested it; it
helps some but indicates there may be another problem with idle timeouts
when running as a standalone daemon.  I have examined these sessions, even
capturing one entering the state; everything was normal and files
transferred fine.  It appears the remote software walked away from the FTP
session after the file transfer completed (indicating it was a web browser,
probably Internet Explorer) and the proxy never noticed the client was
gone.

--=20

Gregory A Lundberg              WU-FTPD Development Group
1441 Elmdale Drive              [email protected]
Kettering, OH 45409-1615 USA    1-800-809-2195

--AqsLC8rIMeq19msA
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5

iQB1AwUBN4/nsg2nXFkJc83RAQHBGQMAzf+nYrXJrhjzXYSGjGz9MI9KDqwKW9Q1
5UpKqMj6+eGzP5AXiUVkTZ+VW85gi0rOUJEZKk649V8LMTWTw6XPJEJiBgMxpLKX
8axG8coaXx+zyB7FKz1pMlw4RzTr3V+d
=aeH2
-----END PGP SIGNATURE-----

--AqsLC8rIMeq19msA--

From [email protected]  Sat Jul 17 09:31:59 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id JAA14273
       for <[email protected]>; Sat, 17 Jul 1999 09:31:59 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id JAA24875;
       Sat, 17 Jul 1999 09:32:55 -0500 (CDT)
Received: from mail5.svr.pol.co.uk (mail5.svr.pol.co.uk [195.92.193.20])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id JAA21843
       for <[email protected]>; Sat, 17 Jul 1999 09:30:11 -0500 (CDT)
Received: from modem-110.argon.dialup.pol.co.uk ([62.136.8.238] helo=gdmckee.freeserve.co.uk)
       by mail5.svr.pol.co.uk with esmtp (Exim 2.12 #1)
       id 115VTd-0004v2-00
       for [email protected]; Sat, 17 Jul 1999 15:30:10 +0100
Received: from p300.gdmckee.local (P300 [192.168.0.5])
       by gdmckee.freeserve.co.uk (8.9.3/8.9.3) with SMTP id PAA01258
       for <[email protected]>; Sat, 17 Jul 1999 15:10:49 +0100
Message-Id: <[email protected]>
Date: Sun, 18 Jul 1999 15:07:28 +0100
Reply-To: [email protected]
Sender: [email protected]
From: "Gordon McKee" <[email protected]>
To: <[email protected]>
Subject: Unsubscribe
MIME-Version: 1.0
Content-Type: multipart/alternative;
       boundary="----=_NextPart_000_00A2_01BED12F.4083CC40"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 5.00.2014.211
X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2014.211
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN

This is a multi-part message in MIME format.

------=_NextPart_000_00A2_01BED12F.4083CC40
Content-Type: text/plain;
       charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

Hi

I thought this e:mail group was for updates.  How do I un-subscribe to =
it?

[email protected]

------=_NextPart_000_00A2_01BED12F.4083CC40
Content-Type: text/html;
       charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META content=3D"text/html; charset=3Diso-8859-1" =
http-equiv=3DContent-Type>
<META content=3D"MSHTML 5.00.2014.210" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV><FONT face=3DArial size=3D2>Hi</FONT></DIV>
<DIV>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D2>I thought this e:mail group was for =
updates.&nbsp;=20
How do I un-subscribe to it?</FONT></DIV>
<DIV>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D2><A=20
href=3D"mailto:[email protected]">[email protected]</A></FONT></DIV></B=
ODY></HTML>

------=_NextPart_000_00A2_01BED12F.4083CC40--


From [email protected]  Sat Jul 17 11:21:45 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id LAA14909
       for <[email protected]>; Sat, 17 Jul 1999 11:21:45 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id LAA07824;
       Sat, 17 Jul 1999 11:22:44 -0500 (CDT)
Received: from mail.vr.net ([email protected] [205.133.13.8])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id LAA13538
       for <[email protected]>; Sat, 17 Jul 1999 11:17:20 -0500 (CDT)
Received: (from lundberg@localhost)
       by mail.vr.net (8.9.3/8.9.3) id MAA11978;
       Sat, 17 Jul 1999 12:16:59 -0400
Message-Id: <[email protected]>
Date: Sat, 17 Jul 1999 12:16:59 -0400
Reply-To: Gregory A Lundberg <[email protected]>
Sender: [email protected]
From: Gregory A Lundberg <[email protected]>
To: Gordon McKee <[email protected]>
Cc: WU-FTPD Discussion List <[email protected]>
Subject: Re: Unsubscribe
In-Reply-To: <[email protected]>; from Gordon McKee on Sun, Jul 18, 1999 at 03:07:28PM +0100
References: <[email protected]>
Mime-Version: 1.0
Content-Type: multipart/signed; boundary="tThc/1wpZn/ma/RB"; micalg=pgp-md5;
       protocol="application/pgp-signature"
X-Mailer: Mutt 0.95.6i
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN


--tThc/1wpZn/ma/RB
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable

On Sun, Jul 18, 1999 at 03:07:28PM +0100, Gordon McKee wrote:

> I thought this e:mail group was for updates.  How do I un-subscribe to it?

In the FAQ.

The location of the latest version of wu-ftpd can be found in the=20
directory
=20
     ftp://ftp.wu-ftpd.org/pub/wu-ftpd/
=20
wu-ftpd Resource Center:  http://www.landfield.com/wu-ftpd/
wu-ftpd FAQ:              http://www.cetis.hvu.nl/~koos/wu-ftpd-faq.html
wu-ftpd list archive:     http://www.landfield.com/wu-ftpd/mail-archive/

--=20

Gregory A Lundberg              WU-FTPD Development Group
1441 Elmdale Drive              [email protected]
Kettering, OH 45409-1615 USA    1-800-809-2195

--tThc/1wpZn/ma/RB
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5

iQB1AwUBN5CeaA2nXFkJc83RAQFEIAL/Vnu7sxOL/AzzH5gy3iI18uvVWybr/uFR
Fvd82gTxN0blcTvUd9VwETZGenxprGUPrEyE3ZlG92cjCT9CwKqE22EheOU5aq8f
x71UN1jZVxBXKNWmRBIgbekiMusYSJh1
=jArr
-----END PGP SIGNATURE-----

--tThc/1wpZn/ma/RB--

From [email protected]  Mon Jul 19 02:22:20 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id CAA02231
       for <[email protected]>; Mon, 19 Jul 1999 02:22:19 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id CAA00829;
       Mon, 19 Jul 1999 02:23:08 -0500 (CDT)
Received: from mail.cruzio.com ([email protected] [208.226.92.37])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id CAA27433
       for <[email protected]>; Mon, 19 Jul 1999 02:19:28 -0500 (CDT)
Received: from loop (sa-165-227-130-30.cruzio.com [165.227.130.30])
       by mail.cruzio.com with SMTP id AAA01809
       for <[email protected]>; Mon, 19 Jul 1999 00:19:30 -0700 (PDT)
Message-Id: <[email protected]>
Date: Mon, 19 Jul 1999 00:18:43 +0100
Reply-To: [email protected]
Sender: [email protected]
From: Andrew Bennett <[email protected]>
To: [email protected]
Subject: Re: virtual via tcpd or inetd
In-Reply-To: <[email protected]>
References: <[email protected]>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
X-Sender: [email protected]
X-Mailer: QUALCOMM Windows Eudora Pro Version 3.0.5 (32)
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN

At 05:56 PM 7/10/99 -0400, [email protected] wrote:
>I seem to remember a version of the virtual howto that include a way to
>get inetd or tcpd to invoke different wu.ftpd's. Can someone tell me how
>to do this. (I am not doing this for wu-ftpd just remember seeing it in
>the docs).

The inetd that comes with FreeBSD has this capability if you have
multiple IP addresses.  This may be rolled into other BSD ports as well.
Read the man pages, and check for the -a option.

There are also inetd replacements, like xinetd, and perhaps rinetd.  I
cannot vouch for their usefullness though.  You are on your own.


Andrew

From [email protected]  Mon Jul 19 13:50:14 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id NAA14339
       for <[email protected]>; Mon, 19 Jul 1999 13:50:14 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id NAA11713;
       Mon, 19 Jul 1999 13:51:03 -0500 (CDT)
Received: from correo.data.net.mx (correo.data.net.mx [200.13.16.5])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id NAA07225
       for <[email protected]>; Mon, 19 Jul 1999 13:49:18 -0500 (CDT)
Received: from maherr ([200.13.28.78]) by correo.data.net.mx
         (Post.Office MTA v3.5.2 release 221 ID# 0-56385U10000L10000S0V35)
         with SMTP id mx for <[email protected]>;
         Mon, 19 Jul 1999 13:50:29 -0500
Message-Id: <[email protected]>
Date: Mon, 19 Jul 1999 13:51:40
Reply-To: [email protected]
Sender: [email protected]
From: Mauricio Herrera <[email protected]>
To: [email protected]
Subject: Authentication
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
X-Sender: [email protected]
X-Mailer: QUALCOMM Windows Eudora Light Version 3.0.6 (32)
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN

Hi all!!

I have Red Hat Linux 6.0 and WUFTPD 2.5.0 patched. When any user tries to
connect to the server, it rejects the username and password. This happens
with both real and guest users, even anonymous are rejected with this
error. What could be the problem? I have tried with and without shadow
passwords. I have a guestgroup and a realgroup in ftpaccess.

Thanks a lot for any help!!

Mauricio

From [email protected]  Mon Jul 19 14:02:54 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id OAA14596
       for <[email protected]>; Mon, 19 Jul 1999 14:02:53 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id OAA07152;
       Mon, 19 Jul 1999 14:03:49 -0500 (CDT)
Received: from mail.vr.net ([email protected] [205.133.13.8])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id NAA17832
       for <[email protected]>; Mon, 19 Jul 1999 13:58:07 -0500 (CDT)
Received: (from lundberg@localhost)
       by mail.vr.net (8.9.3/8.9.3) id OAA30003;
       Mon, 19 Jul 1999 14:57:58 -0400
Message-Id: <[email protected]>
Date: Mon, 19 Jul 1999 14:57:58 -0400
Reply-To: Gregory A Lundberg <[email protected]>
Sender: [email protected]
From: Gregory A Lundberg <[email protected]>
To: Mauricio Herrera <[email protected]>
Cc: [email protected]
Subject: Re: Authentication
In-Reply-To: <[email protected]>; from Mauricio Herrera on Mon, Jul 19, 1999 at 01:51:40PM +0000
References: <[email protected]>
Mime-Version: 1.0
Content-Type: multipart/signed; boundary=d6Gm4EdcadzBjdND; micalg=pgp-md5;
       protocol="application/pgp-signature"
X-Mailer: Mutt 0.95.6i
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN


--d6Gm4EdcadzBjdND
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable

On Mon, Jul 19, 1999 at 01:51:40PM +0000, Mauricio Herrera wrote:

> I have Red Hat Linux 6.0 and WUFTPD 2.5.0 patched. When any user tries to
> connect to the server, it rejects the username and password. This happens
> with both real and guest users, even anonymous are rejected with this
> error. What could be the problem? I have tried with and without shadow
> passwords. I have a guestgroup and a realgroup in ftpaccess.=20

check your setup, read the FAQ.

be sure you start the daemon with -a -l -i -o and add
 log security real,guest,anonymous
to your ftpaccess file.

be sure your syslog sends all messages _somewhere_

the cause for the failure will be in your system log.

--=20

Gregory A Lundberg              WU-FTPD Development Group
1441 Elmdale Drive              [email protected]
Kettering, OH 45409-1615 USA    1-800-809-2195

--d6Gm4EdcadzBjdND
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5

iQB1AwUBN5NnCg2nXFkJc83RAQGdRAL+NF/67KbsbScc9a8+kTVHNUZBJvgQnPp7
U9KugEJb/7mFp7tMNrY9Gn5PYj71cD9Wx7HWk1kTzpiaVw7IWVXuwzuqFOREDG7E
MQ4P66S5iNxeHXkmnvOtpjyoifFgdE3C
=glS1
-----END PGP SIGNATURE-----

--d6Gm4EdcadzBjdND--

From [email protected]  Wed Jul 21 12:04:54 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id MAA16845
       for <[email protected]>; Wed, 21 Jul 1999 12:04:53 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id MAA12084;
       Wed, 21 Jul 1999 12:05:47 -0500 (CDT)
Received: from tower.ti.com (tower.ti.com [192.94.94.5])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id MAA09332
       for <[email protected]>; Wed, 21 Jul 1999 12:03:16 -0500 (CDT)
Received: from spanky.dal.asp.ti.com ([172.24.154.20]) by tower.ti.com (8.8.8) with ESMTP id MAA20193; Wed, 21 Jul 1999 12:02:42 -0500 (CDT)
Received: from pavis.asic.sc.ti.com (pavis.asic.sc.ti.com [128.247.100.46])
       by spanky.dal.asp.ti.com (8.8.8+Sun/8.8.8/FL-ASP-1.13) with ESMTP id MAA21183;
       Wed, 21 Jul 1999 12:02:41 -0500 (CDT)
Received: (from bobl@localhost) by pavis.asic.sc.ti.com (8.8.6 (PHNE_17135)/8.7.1) id MAA12108; Wed, 21 Jul 1999 12:02:41 -0500 (CDT)
Message-Id: <[email protected]>
Date: Wed, 21 Jul 1999 12:02:41 CDT
Reply-To: [email protected] (Bob Luckin)
Sender: [email protected]
From: Bob Luckin <[email protected]>
To: [email protected]
Cc: [email protected]
Subject: Re: FTP directories and files
In-Reply-To: <[email protected]>; from "Ferdinand Gatmaitan" at Jul 21, 99 2:13 pm
X-MIMI-Options: HEADERS TI2
X-Mailer: Elm [revision: 212.4]
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN

> Mabuhay!

Mabuhay !  (My folks lived in the Philippines for a while.)

> I saw your email address on wu ftpd mailing list and I thought you can
> help me...Can you help me on my FTP server? I'm planning to prepare

I'll try to help, but you would be best posting your email to the list, so
that anyone can reply.  As it happens I don't use the guestgroup feature, so
someone else may be more able to help you (although I'll try).  I'm copying
this to the list in case more advice is needed.

> users to
> upload their webpage through FTP. I made a "webgrp" on /etc/group with
> GID of 20000... I also edited users in /etc/passwd.. like this:
>
> nfi:x:502:20000:Nadia Ismael ( Asiagate
> ):/home1/support/nfi/www/./:/bin/ftponly
>
> and of course I edited /etc/ftpaccess and add this line:
>
> guestgroup  webgrp
>
> I also made a dummy shell named "ftponly" to prevent telnet access. Now
> everything is working great! EXCEPT when I upload files using CuteFTP,
> BulletProof FTP clients.... yeah the files have been successfully
> uploaded.
> BUT I can't see the uploaded files. So I tried the old FTP of DOS...
> when I
> type "ls" I can see the uploaded files! Oh! but our users use CuteFTP,
> BulletProof FTP, etc.
>
> Please.... can you help me?

You need to make sure that there is a copy of ls and any related libraries
under the directory each guest user is chrooted to.

So if their chrooted directory is /home1/support/nfi/www/, you'll need
  /home1/support/nfi/www/bin/ls
and if your ls uses shared libraries, you'll also need to put them in
  /home1/support/nfi/www/usr/lib

The next version of wu-ftpd will have a built-in ls, so this may not be
necessary when that comes out.  But until then, you need the relevant files
in the chrooted area.

I hope this solves the problem.

If not, these URL's are also a good source of help :-
wu-ftpd Resource Center:  http://www.landfield.com/wu-ftpd/
Guest how-to:             http://www.landfield.com/wu-ftpd/guest-howto.html
wu-ftpd FAQ:              http://www.cetis.hvu.nl/~koos/wu-ftpd-faq.html
wu-ftpd list archive:     http://www.landfield.com/wu-ftpd/mail-archive/

Cheers, Bob
--
Bob Luckin      [email protected]

From [email protected]  Wed Jul 21 14:12:32 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id OAA19145
       for <[email protected]>; Wed, 21 Jul 1999 14:12:31 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id OAA14978;
       Wed, 21 Jul 1999 14:13:38 -0500 (CDT)
Received: from castor.ipac.caltech.edu (ipac.caltech.edu [131.215.11.35])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id OAA10899
       for <[email protected]>; Wed, 21 Jul 1999 14:13:09 -0500 (CDT)
Received: from light (light.ipac.caltech.edu [134.4.40.84])
         by castor.ipac.caltech.edu (8.8.8/8.6.4)
         with ESMTP id MAA08729
         for <[email protected]>; Wed, 21 Jul 1999 12:13:08 -0700 (PDT)
Received: (jrl@localhost) by light (SMI-8.6/8.6.4) id MAA21750 for [email protected]; Wed, 21 Jul 1999 12:13:08 -0700
Message-Id: <199907211913.MAA21750@light>
Date: Wed, 21 Jul 1999 12:13:08 -0700
Reply-To: [email protected]
Sender: [email protected]
From: Jack Lampley <[email protected]>
To: [email protected]
Subject: qutoas in anon ftp
X-Sun-Charset: US-ASCII
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN




Can you limit the amount of space an anonymous ftp session can have when writing into
a directory? This isn't for all anonymous ftp users just anonymous logins to a specific
subdirectory under ~ftp. My guess is no without a user in the password file but I'm a
novice who only rarely revisits ftp setup issues.

Thanks in advance,

Jack Lampley, System Administrator
Infrared Processing and Analysis Center (IPAC)
California Institute of Technology (CalTech)
MS 100/22, Pasadena, CA 91125

Telephone : 818-397-9551
Internet  : [email protected]

From [email protected]  Wed Jul 21 14:39:06 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id OAA19545
       for <[email protected]>; Wed, 21 Jul 1999 14:39:04 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id OAA20178;
       Wed, 21 Jul 1999 14:40:11 -0500 (CDT)
Received: from mail.vr.net ([email protected] [205.133.13.8])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id OAA10058
       for <[email protected]>; Wed, 21 Jul 1999 14:35:23 -0500 (CDT)
Received: (from lundberg@localhost)
       by mail.vr.net (8.9.3/8.9.3) id PAA25017;
       Wed, 21 Jul 1999 15:35:07 -0400
Message-Id: <[email protected]>
Date: Wed, 21 Jul 1999 15:35:05 -0400
Reply-To: Gregory A Lundberg <[email protected]>
Sender: [email protected]
From: Gregory A Lundberg <[email protected]>
To: Jack Lampley <[email protected]>
Cc: WU-FTPD Discussion List <[email protected]>
Subject: Re: qutoas in anon ftp
In-Reply-To: <199907211913.MAA21750@light>; from Jack Lampley on Wed, Jul 21, 1999 at 12:13:08PM -0700
References: <199907211913.MAA21750@light>
Mime-Version: 1.0
Content-Type: multipart/signed; boundary=V0207lvV8h4k8FAm; micalg=pgp-md5;
       protocol="application/pgp-signature"
X-Mailer: Mutt 0.95.6i
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN


--V0207lvV8h4k8FAm
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable

On Wed, Jul 21, 1999 at 12:13:08PM -0700, Jack Lampley wrote:

> Can you limit the amount of space an anonymous ftp session can have when
> writing into a directory? This isn't for all anonymous ftp users just
> anonymous logins to a specific subdirectory under ~ftp. My guess is no
> without a user in the password file but I'm a novice who only rarely
> revisits ftp setup issues.=20

The anonymous use is in the passwd file, username 'ftp'.

The upload clause sets the ownership for new files uploaded.

You'll need to read the quota system documentation for your platform to
determine who to set quotas.

--=20

Gregory A Lundberg              WU-FTPD Development Group
1441 Elmdale Drive              [email protected]
Kettering, OH 45409-1615 USA    1-800-809-2195

--V0207lvV8h4k8FAm
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5

iQB1AwUBN5YSyg2nXFkJc83RAQHY7gL/Xis5Wq8IVRJt+jg4X3/K7ux7KXXt4roH
HmVUw5qnnpdVJIy96EGLP26LpjErOvcINBW5G8mFg0uv1yCk8EkdI7PZ82CTWeXW
extJtIdTAJB47PhKb4Oe7Bjp6R/8swLb
=mRIY
-----END PGP SIGNATURE-----

--V0207lvV8h4k8FAm--

From [email protected]  Wed Jul 21 16:49:15 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id QAA21850
       for <[email protected]>; Wed, 21 Jul 1999 16:48:48 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id QAA27475;
       Wed, 21 Jul 1999 16:49:48 -0500 (CDT)
Received: from Draco.house.gov (draco.house.gov [143.231.86.9])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id QAA12143
       for <[email protected]>; Wed, 21 Jul 1999 16:48:33 -0500 (CDT)
Received: from hrmims02.house.gov (hrmims02.house.gov [143.231.32.158])
       by Draco.house.gov (8.9.1b+Sun/8.9.1) with ESMTP id RAA02338
       for <[email protected]>; Wed, 21 Jul 1999 17:47:07 -0400 (EDT)
Received: by hrmims02.house.gov with Internet Mail Service (5.5.2539.1)
       id <PJXR1NHZ>; Wed, 21 Jul 1999 17:48:02 -0400
Message-Id: <[email protected]>
Date: Wed, 21 Jul 1999 17:47:52 -0400
Reply-To: [email protected]
Sender: [email protected]
From: "Pomerance, Debbie" <[email protected]>
To: [email protected]
Subject: noretrieve questions
X-Mailer: Internet Mail Service (5.5.2539.1)
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN

My understanding may be out of kilter.

Wu-ftpd 2.5.0

Using the syntax /etc/ will mark the entire directory "noretrieve".
   Is this the real /etc or the chrooted /etc, or both?  I need to cover
both.

If I mention files specifically - I need the absolute /etc/passwd and the
relative passwd just in case - you never know where the malcontent has cd'ed
to.

Does this cover passwd.bak and passwd.orig, etc.?

If I don't want to close off whole directories... it certainly can be
laborious to mention each file 2x.  Is there a character limit on the
noretrieve statement?  Can you have two noretrieve statements.

Thanks in advance.

Debbie Pomerance




- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
- - - - - -
Deborah Pomerance
Unix System Administration
U.S. House of Representatives        Voice (202) 226-6255
mailto:[email protected]
Washington, DC  20515-6165           Fax  (202) 226-6017
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
- - - - - -




"Those who help others help themselves"
-----------------------------------------------------------------------
Deborah Pomerance               (202) 226-6255
mailto:[email protected]
Unix System Administration
U.S. House of Representatives / House Information Resources


From [email protected]  Wed Jul 21 23:11:22 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id XAA27577
       for <[email protected]>; Wed, 21 Jul 1999 23:11:21 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id XAA07052;
       Wed, 21 Jul 1999 23:12:26 -0500 (CDT)
Received: from nature.Berkeley.EDU (d2.CNR.Berkeley.EDU [128.32.175.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id XAA11969
       for <[email protected]>; Wed, 21 Jul 1999 23:05:50 -0500 (CDT)
Received: by nature.Berkeley.EDU (Postfix, from userid 100)
       id 4466A119A; Wed, 21 Jul 1999 21:05:49 -0700 (PDT)
Message-Id: <[email protected]>
Date: Wed, 21 Jul 1999 21:05:49 -0700
Reply-To: [email protected]
Sender: [email protected]
From: Gary Casterline <[email protected]>
To: WU-FTPD Discussion List <[email protected]>
Subject: SSH tunneling vs. wu-ftpd
Mime-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: 8bit
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN

Hello,

I'm trying to use port forwarding in Data Fellows F-secure SSH to hide
the password exchange when connecting to wuftp-2.5.0 on a solaris 2.6 server.
The authentication succeeds, but the directory listing fails.
The same setup works when connecting to a server running NcFTPd Server.

Here is a transcript of the client log (I don't see anything interesting in
the server log, but can turn up the debugging volume if it'd help):

       WINSOCK.DLL: WinSock 2.0
       WS_FTP95 LE 4.50 97.05.17,
                Copyright � 1992-1997 Ipswitch, Inc.
       - -
       connecting to 127.0.0.1 ...
       Connected to 127.0.0.1 port 21
       220 host.com FTP server (Version wu-2.5.0(1)
          Tue May 25 22:15:38 PDT 1999) ready.
       USER username
       331 Password required for username.
       PASS (hidden)
       230 User username logged in.
       CWD _in
       250 CWD command successful.
       PWD
       257 "/home/username/" is current directory.
       Host type (I): Sun Solaris
       PASV
       227 Entering Passive Mode (127,0,0,1,83,12)
       connecting to 127.0.0.1:21260
       - -
       connecting to 127.0.0.1 ...
       ! Can't connect to 127.0.0.1 - connection refused
       ! connect: connection refused
       PORT 127,0,0,1,5,139
       200 PORT command successful.
       LIST
       425 Can't build data connection: Connection refused.
       ! DoDirList failed 0

Has anyone else gotten this to work with wu-2.5.0?
Any pointers on what I might change in a config file or even in
the code to enable this tunneling?  What are the securtity implications?
Maybe I should just use the guest features and simplify my life.

Thanks,

_Gary

From [email protected]  Wed Jul 21 23:30:38 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id XAA27832
       for <[email protected]>; Wed, 21 Jul 1999 23:30:38 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id XAA10216;
       Wed, 21 Jul 1999 23:31:34 -0500 (CDT)
Received: from aventurine.sge.net (aventurine.sge.net [152.91.14.25])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id XAA06848
       for <[email protected]>; Wed, 21 Jul 1999 23:28:54 -0500 (CDT)
Received: from cadmium.sge.net (cadmium.sge.net [152.91.9.5])
       by aventurine.sge.net (8.9.3/8.9.3) with ESMTP id OAA17491;
       Thu, 22 Jul 1999 14:28:51 +1000 (EST)
Received: (from uucp@localhost)
       by cadmium.sge.net (8.9.3/8.9.3) id OAA05977;
       Thu, 22 Jul 1999 14:28:50 +1000 (EST)
Received: from nodnsquery(10.1.2.11) by cadmium.sge.net via smap (V5.0)
       id xma005928; Thu, 22 Jul 99 14:28:44 +1000
Received: from amber (amber-int2.sge.net [10.1.2.254])
       by kryptonite.sge.net (8.9.3/8.9.3) with SMTP id OAA08608;
       Thu, 22 Jul 1999 14:28:43 +1000 (EST)
Message-Id: <[email protected]>
Date: Thu, 22 Jul 1999 14:27:01 +1000
Reply-To: [email protected]
Sender: [email protected]
From: James McMahon <[email protected]>
To: Gary Casterline <[email protected]>
Cc: WU-FTPD Discussion List <[email protected]>
Subject: Re: SSH tunneling vs. wu-ftpd
References: <[email protected]>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
X-Mailer: Mozilla 4.51 [en] (WinNT; U)
X-Accept-Language: en
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN

Gary,

I believe that this was discussed in the list not so long ago, so the
archives will probably provide more complete information than me.

Gary Casterline wrote:
>
> Hello,
>
> I'm trying to use port forwarding in Data Fellows F-secure SSH to hide
> the password exchange when connecting to wuftp-2.5.0 on a solaris 2.6
> server.
> The authentication succeeds, but the directory listing fails.
> The same setup works when connecting to a server running NcFTPd Server.
>

I believe that this is caused by a "feature" that Gregory Lundberg put
into wu-ftpd in order to make it harder to "hi-jack" a passive ftp
session by connecting to the chosen hi port after it has been decided
and before the real machine can connect to it.

This feature requires that the data connection be established from the
same machine as the control connection.  Hence if you are using SSH port
forwarding, the data and control connections will be coming from
different ports and hence the data connections will be rejected by the
ftp server.

[client log transcript deleted]

> Has anyone else gotten this to work with wu-2.5.0?
> Any pointers on what I might change in a config file or even in
> the code to enable this tunneling?  What are the securtity implications?
> Maybe I should just use the guest features and simplify my life.
>
> Thanks,
>
>  _Gary

Hope this helps,

James


--
***************************************************************************
*     James McMahon                  *     When all else fails
..        *
*     Secure Gateway Environment     *     Read the
destructions.         *
*     [email protected]          *             --
(unknown)           *
***************************************************************************

From [email protected]  Thu Jul 22 01:59:55 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id BAA29419
       for <[email protected]>; Thu, 22 Jul 1999 01:59:55 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id BAA26288;
       Thu, 22 Jul 1999 01:55:31 -0500 (CDT)
Received: from mail.vr.net ([email protected] [205.133.13.8])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id BAA07332
       for <[email protected]>; Thu, 22 Jul 1999 01:34:58 -0500 (CDT)
Received: (from lundberg@localhost)
       by mail.vr.net (8.9.3/8.9.3) id CAA32666;
       Thu, 22 Jul 1999 02:34:14 -0400
Message-Id: <[email protected]>
Date: Thu, 22 Jul 1999 02:34:14 -0400
Reply-To: Gregory A Lundberg <[email protected]>
Sender: [email protected]
From: Gregory A Lundberg <[email protected]>
To: "Pomerance, Debbie" <[email protected]>
Cc: [email protected]
Subject: Re: noretrieve questions
In-Reply-To: <[email protected]>; from Pomerance, Debbie on Wed, Jul 21, 1999 at 05:47:52PM -0400
References: <[email protected]>
Mime-Version: 1.0
Content-Type: multipart/signed; boundary=m51xatjYGsM+13rf; micalg=pgp-md5;
       protocol="application/pgp-signature"
X-Mailer: Mutt 0.95.6i
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN


--m51xatjYGsM+13rf
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable

On Wed, Jul 21, 1999 at 05:47:52PM -0400, Pomerance, Debbie wrote:

> Wu-ftpd 2.5.0
>=20
> Using the syntax /etc/ will mark the entire directory "noretrieve".

>     Is this the real /etc or the chrooted /etc, or both?  I need to cover
> both.

The default for 2.5.0 is the absolute name.

> If I mention files specifically - I need the absolute /etc/passwd and the
> relative passwd just in case - you never know where the malcontent has
> cd'ed to. =20

I'd use

noretrieve absolute /etc/
noretrieve relative /etc/

in your case.  The absolute is default, but stating is documents you're
marking both noretrieve.

> Does this cover passwd.bak and passwd.orig, etc.?

No.  You need to use wildcards in this case.

noretrieve /etc/passwd*

> If I don't want to close off whole directories... it certainly can be
> laborious to mention each file 2x.  Is there a character limit on the
> noretrieve statement?

The line limit for the ftpaccess file.  Um .. just looked at the code and
it appears the entire ftpaccess file is loaded into memory in one go, so
maybe there is no practical limit.

> Can you have two noretrieve statements.

As many as you want.

--=20

Gregory A Lundberg              WU-FTPD Development Group
1441 Elmdale Drive              [email protected]
Kettering, OH 45409-1615 USA    1-800-809-2195

--m51xatjYGsM+13rf
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5

iQB1AwUBN5atVA2nXFkJc83RAQEewwL9HX4wwLI06neeQs/0zyhXQJAMwVPxfh9E
PfpF9HstirLqdXGhxsdiB/dRyuShLr9TxrPkTBtv5El+fhYZz3vEQF2U+hQXdVc9
P4cgzEY29vo5yUoJxaoNsJp/Ke1lVapF
=UOOc
-----END PGP SIGNATURE-----

--m51xatjYGsM+13rf--

From [email protected]  Thu Jul 22 02:38:24 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id CAA29914
       for <[email protected]>; Thu, 22 Jul 1999 02:38:23 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id CAA32246;
       Thu, 22 Jul 1999 02:39:29 -0500 (CDT)
Received: from mail.vr.net ([email protected] [205.133.13.8])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id CAA26271
       for <[email protected]>; Thu, 22 Jul 1999 02:38:26 -0500 (CDT)
Received: (from lundberg@localhost)
       by mail.vr.net (8.9.3/8.9.3) id CAA32759;
       Thu, 22 Jul 1999 02:58:26 -0400
Message-Id: <[email protected]>
Date: Thu, 22 Jul 1999 02:58:26 -0400
Reply-To: Gregory A Lundberg <[email protected]>
Sender: [email protected]
From: Gregory A Lundberg <[email protected]>
To: James McMahon <[email protected]>
Cc: Gary Casterline <[email protected]>,
       WU-FTPD Discussion List <[email protected]>
Subject: Re: SSH tunneling vs. wu-ftpd
In-Reply-To: <[email protected]>; from James McMahon on Thu, Jul 22, 1999 at 02:27:01PM +1000
References: <[email protected]> <[email protected]>
Mime-Version: 1.0
Content-Type: multipart/signed; boundary=lc9FT7cWel8HagAv; micalg=pgp-md5;
       protocol="application/pgp-signature"
X-Mailer: Mutt 0.95.6i
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN


--lc9FT7cWel8HagAv
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable

On Thu, Jul 22, 1999 at 02:27:01PM +1000, James McMahon wrote:

> I believe that this was discussed in the list not so long ago, so the
> archives will probably provide more complete information than me.
>=20
> Gary Casterline wrote:
> >=20
> > I'm trying to use port forwarding in Data Fellows F-secure SSH to hide
> > the password exchange when connecting to wuftp-2.5.0 on a solaris 2.6
> > server.  The authentication succeeds, but the directory listing fails.
> > The same setup works when connecting to a server running NcFTPd Server.
>=20
> I believe that this is caused by a "feature" that Gregory Lundberg put
> into wu-ftpd in order to make it harder to "hi-jack" a passive ftp
> session by connecting to the chosen hi port after it has been decided and
> before the real machine can connect to it.
>=20
> This feature requires that the data connection be established from the
> same machine as the control connection.  Hence if you are using SSH port
> forwarding, the data and control connections will be coming from
> different ports and hence the data connections will be rejected by the
> ftp server.
>=20
> [client log transcript deleted]
>=20
> > Has anyone else gotten this to work with wu-2.5.0?  Any pointers on
> > what I might change in a config file or even in the code to enable this
> > tunneling?  What are the securtity implications?  Maybe I should just
> > use the guest features and simplify my life.

Yes, this was discussed.  In 2.5.0 this is not possible.  In 2.6.0 it will
be configurable in the ftpaccess file.  Here's the manpage section which
will be in 2.6.0:

      pasv-allow <class> [<addrglob> ...]

      port-allow <class> [<addrglob> ...]

           Normally, the daemon does not allow a PORT command to specify
           an address different than that of the control connection.  And
           it does not allow a PASV connection from another address.

           The port-allow clause provides a list of addresses which the
           specified class of user may give on a PORT command.  These
           addresses will be allowed even if they do not match the
           IP-address of the client-side of the control connection.

           The pasv-allow clause provides a list of addresses which the
           specified class of user may make data connections from.  These
           addresses will be allowed even if they do not match the
           IP-address of the client-side of the control connection.

An example:

   # SSH-tunnelled users appear from localhost (yuck!)
   class sshuser real,guest 127.0.0.0/8

   # SSH-tunnelled users are only on the LAN using internal IP numbers
   # (yea!)
   pasv-allow sshuser 10.0.0.0/8
   port-allow sshuser 10.0.0.0/8

2.6.0 is currently in active development.  I am making this change
available to those who wish to test it by emailing a request directly to
me.

--=20

Gregory A Lundberg              WU-FTPD Development Group
1441 Elmdale Drive              [email protected]
Kettering, OH 45409-1615 USA    1-800-809-2195

--lc9FT7cWel8HagAv
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5

iQB1AwUBN5azAA2nXFkJc83RAQGvewL/X9J3hvwyBGbJFIkkqKNOJ+MQY1iuYE3F
7ksP0mrvE4oOULe2yQIlmJD78g9Mm4tdzFnrOwQozvoJv/qh7Psu+gePEXMhS5Lf
YruHCx7F2+etXrb5UUJ/o78BP3yOYyxb
=1qZK
-----END PGP SIGNATURE-----

--lc9FT7cWel8HagAv--

From [email protected]  Thu Jul 22 09:02:25 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id JAA05760
       for <[email protected]>; Thu, 22 Jul 1999 09:02:24 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id JAA20802;
       Thu, 22 Jul 1999 09:03:29 -0500 (CDT)
Received: from note.orchestra.cse.unsw.EDU.AU ([email protected] [129.94.242.29])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id JAA23609
       for <[email protected]>; Thu, 22 Jul 1999 09:00:14 -0500 (CDT)
Received: From mozart With LocalMail ; Thu, 22 Jul 99 23:59:54 +1000
Message-Id: <Pine.GSO.3.95.990722235753.27840D-100000@mozart.orchestra.cse.unsw.EDU.AU>
Date: Thu, 22 Jul 1999 23:59:49 +1000 (EST)
Reply-To: [email protected]
Sender: [email protected]
From: Wal <[email protected]>
To: [email protected]
Subject: Concerning authentication
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
X-Sender: [email protected]
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN

Hello all,

i have a strange problem. I would like to use wuftp however
i need to modify the source code a bit so as i can do the following
with it...
       I have a file that maps usernames into the realuser names
(contained in
the passwd file)
       when a user ftp;s to my server etc...he will login using a given
       username..now the ftpd should check a file which contains a
mapping
       to his "real" user name (the one in the passwd file)..

       So, in source code, i belive all i need to do is to add a function
       that does this before authentication with the passwd file etc..
       i.e..right after the user enters his username and password....
       and before authentication..

Now, my problem is, ive looked at source code etc..for wuftpd 2.5.0 and i
cant seem to find where i should do this...
could someone point me in the right direction as to where i should add
this
bit of extra code?

any help would be greatly appreciated

wal


From [email protected]  Thu Jul 22 09:15:07 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id JAA05965
       for <[email protected]>; Thu, 22 Jul 1999 09:15:06 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id JAA29246;
       Thu, 22 Jul 1999 09:16:14 -0500 (CDT)
Received: from atlantis.csc.umd.edu ([email protected] [129.2.8.129])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id JAA17287
       for <[email protected]>; Thu, 22 Jul 1999 09:12:54 -0500 (CDT)
Received: from atlantis.csc.umd.edu (sendmail@localhost [127.0.0.1])
       by atlantis.csc.umd.edu (8.9.3/8.9.3) with SMTP id KAA21176
       for <[email protected]>; Thu, 22 Jul 1999 10:12:49 -0400 (EDT)
Received: from localhost by atlantis.csc.umd.edu (8.9.3/8.9.3) with ESMTP id KAA21172
       for <[email protected]>; Thu, 22 Jul 1999 10:12:48 -0400 (EDT)
Message-Id: <[email protected]>
Date: Thu, 22 Jul 1999 10:12:47 -0400 (EDT)
Reply-To: [email protected]
Sender: [email protected]
From: "Randall S. Winchester" <[email protected]>
To: WU-FTPD Discussion List <[email protected]>
Subject: anonymous upload works with wu-ftpd-2.4.2 not with wu-ftpd-2.5.0
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
X-Sender: [email protected]
X-Authentication-Warning: atlantis.csc.umd.edu: rsw owned process doing -bs
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN


I have gone over the "upload.configuration.HOWTO" numerous times and tried
every possible configuration I could think of with no success. Out of
frustration I went back to the "wu-ftpd-2.4.2" release and had no problems
making anonymous uploads work. Using the solaris ftp client, both "put" and
"mkdir" fail with the "wu-ftpd-2.5.0" release. I have tried this with
Solaris-2.5 and Solaris-2.6 wu-ftpd built binaries, with no options.

If anyone has anonymous upload working with "wu-ftpd-2.5.0", could they send
me their ftpaccess file, please.

Thanks,
Randall


From [email protected]  Thu Jul 22 09:34:35 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id JAA06379
       for <[email protected]>; Thu, 22 Jul 1999 09:34:34 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id JAA17922;
       Thu, 22 Jul 1999 09:35:42 -0500 (CDT)
Received: from mail.vr.net ([email protected] [205.133.13.8])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id JAA26808
       for <[email protected]>; Thu, 22 Jul 1999 09:32:02 -0500 (CDT)
Received: (from lundberg@localhost)
       by mail.vr.net (8.9.3/8.9.3) id KAA02580;
       Thu, 22 Jul 1999 10:31:54 -0400
Message-Id: <[email protected]>
Date: Thu, 22 Jul 1999 10:31:53 -0400
Reply-To: Gregory A Lundberg <[email protected]>
Sender: [email protected]
From: Gregory A Lundberg <[email protected]>
To: Wal <[email protected]>
Cc: WU-FTPD Discussion List <[email protected]>
Subject: Re: Concerning authentication
In-Reply-To: <Pine.GSO.3.95.990722235753.27840D-100000@mozart.orchestra.cse.unsw.EDU.AU>; from Wal on Thu, Jul 22, 1999 at 11:59:49PM +1000
References: <Pine.GSO.3.95.990722235753.27840D-100000@mozart.orchestra.cse.unsw.EDU.AU>
Mime-Version: 1.0
Content-Type: multipart/signed; boundary=Bu8it7iiRSEf40bY; micalg=pgp-md5;
       protocol="application/pgp-signature"
X-Mailer: Mutt 0.95.6i
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN


--Bu8it7iiRSEf40bY
Content-Type: multipart/mixed; boundary="JP+T4n/bALQSJXh8"


--JP+T4n/bALQSJXh8
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable

On Thu, Jul 22, 1999 at 11:59:49PM +1000, Wal wrote:

>         I have a file that maps usernames into the realuser names
>         (contained in the passwd file) when a user ftp;s to my server
>         etc...he will login using a given username..now the ftpd should
>         check a file which contains a mapping to his "real" user name
>         (the one in the passwd file)..

The attached patch should get you going.  Just add the function
RemapUserName(); return 0 if error, non-0 if OK.  If you want to allow
un-mapped usernames as well, remove the test later in the patch.

--=20

Gregory A Lundberg              WU-FTPD Development Group
1441 Elmdale Drive              [email protected]
Kettering, OH 45409-1615 USA    1-800-809-2195

--JP+T4n/bALQSJXh8
Content-Type: text/plain; charset=us-ascii
Content-Disposition: attachment; filename=s
Content-Transfer-Encoding: quoted-printable

Index: src/ftpd.c
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
RCS file: /cvsroot/wu-ftpd-stable/src/ftpd.c,v
retrieving revision 1.21
diff -c -r1.21 ftpd.c
*** src/ftpd.c  1999/05/20 16:37:40     1.21
--- src/ftpd.c  1999/07/22 14:28:54
***************
*** 1525,1536 ****
=20
 void
 #ifdef __STDC__
! user(char *name)
 #else
! user(name)
! char *name;
 #endif
 {
     char *cp;
     char *shell;
     char *getusershell();
--- 1525,1538 ----
=20
 void
 #ifdef __STDC__
! user(char *original_name)
 #else
! user(original_name)
! char *original_name;
 #endif
 {
+     char new_name[64]; /* Should be big enough. */
+     char *name;
     char *cp;
     char *shell;
     char *getusershell();
***************
*** 1540,1545 ****
--- 1542,1554 ----
     extern char *start_auth();
 #endif
=20
+     extern int RemapUserName (char *to, size_t tolen, const char *from);
+     int RemapStatus =3D RemapuserName (new_name, sizeof(new_name), origin=
al_name);
+     if (RemapStatus)
+         name =3D new_name;
+     else
+         name =3D original_name;
+=20
 /* H* fix: if we're logged in at all, we can't log in again. */
     if (logged_in) {
 #ifdef VERBOSE_ERROR_LOGING
***************
*** 1549,1554 ****
--- 1558,1575 ----
       reply(530, "Already logged in.");
       return;
     }
+=20
+     if (!RemapStatus) {
+ #ifndef HELP_CRACKERS
+           DenyLoginAfterPassword =3D 1;
+           syslog(LOG_NOTICE, "FTP LOGIN REFUSED (cannot remap username) F=
ROM %s, %s", remoteident, name);
+ #else
+           reply(530, "User %s access denied.", name);
+           syslog(LOG_NOTICE, "FTP LOGIN REFUSED (cannot remap username) F=
ROM %s, %s", remoteident, name);
+           return;
+ #endif
+     }
+=20
 #ifndef HELP_CRACKERS
     askpasswd =3D 1;
     DenyLoginAfterPassword =3D 0;

--JP+T4n/bALQSJXh8--

--Bu8it7iiRSEf40bY
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5

iQB1AwUBN5cdRQ2nXFkJc83RAQHTKwL9F8jjV49NS+ZzqN9MTz3uqqlrl8bFsb80
WL2yh8Ubp8gqnSnZu+tiY8POnTGyocmwoVNDmcyIBgrpb5YfIdszw4klGx6tyMA7
QVfcokgMQzN8L1UvH19lVHcgTmp7HvsY
=WjQr
-----END PGP SIGNATURE-----

--Bu8it7iiRSEf40bY--

From [email protected]  Thu Jul 22 09:41:07 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id JAA06525
       for <[email protected]>; Thu, 22 Jul 1999 09:41:06 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id JAA30074;
       Thu, 22 Jul 1999 09:42:14 -0500 (CDT)
Received: from mail.vr.net ([email protected] [205.133.13.8])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id JAA25179
       for <[email protected]>; Thu, 22 Jul 1999 09:37:39 -0500 (CDT)
Received: (from lundberg@localhost)
       by mail.vr.net (8.9.3/8.9.3) id KAA02645;
       Thu, 22 Jul 1999 10:37:32 -0400
Message-Id: <[email protected]>
Date: Thu, 22 Jul 1999 10:37:32 -0400
Reply-To: Gregory A Lundberg <[email protected]>
Sender: [email protected]
From: Gregory A Lundberg <[email protected]>
To: "Randall S. Winchester" <[email protected]>
Cc: WU-FTPD Discussion List <[email protected]>
Subject: Re: anonymous upload works with wu-ftpd-2.4.2 not with wu-ftpd-2.5.0
In-Reply-To: <[email protected]>; from Randall S. Winchester on Thu, Jul 22, 1999 at 10:12:47AM -0400
References: <[email protected]>
Mime-Version: 1.0
Content-Type: multipart/signed; boundary=Q8BnQc91gJZX4vDc; micalg=pgp-md5;
       protocol="application/pgp-signature"
X-Mailer: Mutt 0.95.6i
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN


--Q8BnQc91gJZX4vDc
Content-Type: multipart/mixed; boundary=hxkXGo8AKqTJ+9QI


--hxkXGo8AKqTJ+9QI
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable

On Thu, Jul 22, 1999 at 10:12:47AM -0400, Randall S. Winchester wrote:

> I have gone over the "upload.configuration.HOWTO" numerous times and
> tried every possible configuration I could think of with no success. Out
> of frustration I went back to the "wu-ftpd-2.4.2" release and had no
> problems making anonymous uploads work. Using the solaris ftp client,
> both "put" and "mkdir" fail with the "wu-ftpd-2.5.0" release. I have
> tried this with Solaris-2.5 and Solaris-2.6 wu-ftpd built binaries, with
> no options.
>=20
> If anyone has anonymous upload working with "wu-ftpd-2.5.0", could they
> send me their ftpaccess file, please.

--=20

Gregory A Lundberg              WU-FTPD Development Group
1441 Elmdale Drive              [email protected]
Kettering, OH 45409-1615 USA    1-800-809-2195

--hxkXGo8AKqTJ+9QI
Content-Type: text/plain; charset=us-ascii
Content-Disposition: attachment; filename=ftpaccess
Content-Transfer-Encoding: quoted-printable

hostname ftp.wu-ftpd.org
daemonaddress 205.133.13.68
keepalive yes
greeting brief
email [email protected]

loginfails 3
deny-uid %0-
deny-gid %0-
allow-uid ftp
allow-gid ftp

realuser ftp

anonymous-root /ftp

class anonymous anonymous *

limit-time anonymous 30

limit anonymous 35 Any

message .welcome login
message .message cwd=3D*
readme README* cwd=3D*

compress yes *
tar yes *

private no

passwd-check rfc822 warn

log transfers real,anonymous,guest inbound,outbound=20
log security real,anonymous,guest
log syslog+xferlog

shutdown /etc/shutmsg

chmod no anonymous
delete no anonymous
overwrite no anonymous
rename no anonymous
umask no anonymous

path-filter anonymous,guest,real /etc/pathmsg ^[-A-Za-z0-9_\.]*$ ^\. ^-

upload /ftp * no
upload /ftp /incoming yes wuftpd wuftpd 440 nodirs

noretrieve core

--hxkXGo8AKqTJ+9QI--

--Q8BnQc91gJZX4vDc
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5

iQB1AwUBN5celg2nXFkJc83RAQFTQQMAsVaGkTF5DDqmQp/pQhpMtvYTUA0y7qR4
jFTVnmEG9WQi/VPTYPitrQwIOhT+P/JM7BY4dcicGetp8fmaxAgT09Lui0UQT9N2
kB3PIO12CXfQ1Ap91C3WVD1LD25uAHic
=o6hi
-----END PGP SIGNATURE-----

--Q8BnQc91gJZX4vDc--

From [email protected]  Thu Jul 22 10:14:07 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id KAA07100
       for <[email protected]>; Thu, 22 Jul 1999 10:14:06 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id KAA21891;
       Thu, 22 Jul 1999 10:15:12 -0500 (CDT)
Received: from mail.lightspeedtech.net (apex04.apex.microserve.com [207.44.12.104])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id KAA13568
       for <[email protected]>; Thu, 22 Jul 1999 10:08:45 -0500 (CDT)
Received: by apex04.apex.microserve.com with Internet Mail Service (5.5.2448.0)
       id <PB4D5NXC>; Thu, 22 Jul 1999 11:04:20 -0400
Message-Id: <51B997C456C7D2119C6A004005A406DA02B520@apex04.apex.microserve.com>
Date: Thu, 22 Jul 1999 11:04:13 -0400
Reply-To: [email protected]
Sender: [email protected]
From: Mike Handley <[email protected]>
To: "'[email protected]'" <[email protected]>
Subject: Automatically renaming files for anonymous users.
MIME-Version: 1.0
Content-Type: text/plain;
       charset="iso-8859-1"
X-Mailer: Internet Mail Service (5.5.2448.0)
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN

Hi All,
 I have a customer ftping the same file name off of serveral differents
workstations to the server.
For some reason, the script he is using will not allow him to specify a
different name.
All the files are being ftp'ed in anonymously to an /incoming directory.
Is there a way to have wu-ftp automatically rename the file to filename1 if
filename already exists?

TIA
MH


**************************************************
Mike Handley
LightSpeed Technologies Inc.                    Mail:
[email protected]
                                          Phone: 570-714-5078
***************************************************

From [email protected]  Thu Jul 22 11:25:13 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id LAA08358
       for <[email protected]>; Thu, 22 Jul 1999 11:25:11 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id LAA08565;
       Thu, 22 Jul 1999 11:26:15 -0500 (CDT)
Received: from mail.vr.net ([email protected] [205.133.13.8])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id LAA06405
       for <[email protected]>; Thu, 22 Jul 1999 11:21:19 -0500 (CDT)
Received: (from lundberg@localhost)
       by mail.vr.net (8.9.3/8.9.3) id MAA03454;
       Thu, 22 Jul 1999 12:20:59 -0400
Message-Id: <[email protected]>
Date: Thu, 22 Jul 1999 12:20:59 -0400
Reply-To: Gregory A Lundberg <[email protected]>
Sender: [email protected]
From: Gregory A Lundberg <[email protected]>
To: Mike Handley <[email protected]>
Cc: WU-FTPD Discussion List <[email protected]>
Subject: Re: Automatically renaming files for anonymous users.
In-Reply-To: <51B997C456C7D2119C6A004005A406DA02B520@apex04.apex.microserve.com>; from Mike Handley on Thu, Jul 22, 1999 at 11:04:13AM -0400
References: <51B997C456C7D2119C6A004005A406DA02B520@apex04.apex.microserve.com>
Mime-Version: 1.0
Content-Type: multipart/signed; boundary=azLHFNyN32YCQGCU; micalg=pgp-md5;
       protocol="application/pgp-signature"
X-Mailer: Mutt 0.95.6i
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN


--azLHFNyN32YCQGCU
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable

On Thu, Jul 22, 1999 at 11:04:13AM -0400, Mike Handley wrote:

> I have a customer ftping the same file name off of serveral differents
> workstations to the server.   For some reason, the script he is using
> will not allow him to specify a different name.  All the files are being
> ftp'ed in anonymously to an /incoming directory.  Is there a way to have
> wu-ftp automatically rename the file to filename1 if filename already
> exists?

Nope.  Happy hacking.  Look in src/ftpd.c; search for upl_check to get into
the right area.  just above you'll see the following line:

   if (!overwrite && exists) {

If this is true, the daemon currently isues a message and refuses the
upload.  You'll want to delay this until after upl_check() has been called
and given its permission for the upload.  Then, just before opening the
file, you'll want to rename it.

You probably should do a little checking in the (!overwrite && exists)
section.  I'd add an ftpaccess clause which gives directories and/or names
which this should be done for (take a look at the noretrieve logic ..
something similar for automatically renaming is what I'm thinking).

--=20

Gregory A Lundberg              WU-FTPD Development Group
1441 Elmdale Drive              [email protected]
Kettering, OH 45409-1615 USA    1-800-809-2195

--azLHFNyN32YCQGCU
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5

iQB1AwUBN5c21g2nXFkJc83RAQF68gL/SHtafF7MTfMVbg8yC9lHGCTNP2JZx9J9
OcZkLFFGF7qrU/XlSRwP+3MkwIxeWsrgZDK3+zDKGgAcwlG353u3ZFX3JqzLUSRQ
Rh0ir1eI1/GadYYeYuTJWVjLzX+qVBNA
=vtdI
-----END PGP SIGNATURE-----

--azLHFNyN32YCQGCU--

From [email protected]  Thu Jul 22 12:16:20 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id MAA09264
       for <[email protected]>; Thu, 22 Jul 1999 12:16:19 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id MAA00494;
       Thu, 22 Jul 1999 12:17:23 -0500 (CDT)
Received: from sco.COM (scol.london.sco.COM [150.126.1.48])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id MAA15926
       for <[email protected]>; Thu, 22 Jul 1999 12:15:40 -0500 (CDT)
Received: from tyne.london.sco.COM(150.126.1.103), claiming to be "tyne.sco.com"
via SMTP by scol.london.sco.COM, id smtpdAAAa006d-; Thu Jul 22 18:14:02 1999
Message-Id: <[email protected]>
Date: Thu, 22 Jul 99 18:13:02 BST
Reply-To: [email protected]
Sender: [email protected]
From: Ian Willis <[email protected]>
To: [email protected]
Cc: [email protected]
Subject: Re: Automatically renaming files for anonymous users.
X-Mailer: SCO OpenServer Mail Release 5.0
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN

wu-ftpd will upload a file to a unique name (by appending .n) when the
client uses the STOU (Store Unique) command rather than the usual STOR.

Changing your customers script to use STOU in place of STOR would solve
the problem, on the standard BSD ftp client the sunique command toggles
between STOR and STOU.

Ian Willis
SCO Internet Engineering Group, Watford, England

| From: Gregory A Lundberg <[email protected]>
| Date: Thu, 22 Jul 1999 12:20:59 -0400
| To: Mike Handley <[email protected]>
| Cc: WU-FTPD Discussion List <[email protected]>
| Subject: Re: Automatically renaming files for anonymous users.
|
| On Thu, Jul 22, 1999 at 11:04:13AM -0400, Mike Handley wrote:
|
| > I have a customer ftping the same file name off of serveral differents
| > workstations to the server.   For some reason, the script he is using
| > will not allow him to specify a different name.  All the files are being
| > ftp'ed in anonymously to an /incoming directory.  Is there a way to have
| > wu-ftp automatically rename the file to filename1 if filename already
| > exists?
|
| Nope.  Happy hacking.  Look in src/ftpd.c; search for upl_check to get into
| the right area.  just above you'll see the following line:
|
|     if (!overwrite && exists) {
|
| If this is true, the daemon currently isues a message and refuses the
| upload.  You'll want to delay this until after upl_check() has been called
| and given its permission for the upload.  Then, just before opening the
| file, you'll want to rename it.
|
| You probably should do a little checking in the (!overwrite && exists)
| section.  I'd add an ftpaccess clause which gives directories and/or names
| which this should be done for (take a look at the noretrieve logic ..
| something similar for automatically renaming is what I'm thinking).
|
| Gregory A Lundberg              WU-FTPD Development Group
| 1441 Elmdale Drive              [email protected]
| Kettering, OH 45409-1615 USA    1-800-809-2195

From [email protected]  Thu Jul 22 13:01:49 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id NAA10074
       for <[email protected]>; Thu, 22 Jul 1999 13:01:47 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id NAA27624;
       Thu, 22 Jul 1999 13:02:54 -0500 (CDT)
Received: from mail.lightspeedtech.net (apex04.apex.microserve.com [207.44.12.104])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id MAA10341
       for <[email protected]>; Thu, 22 Jul 1999 12:58:16 -0500 (CDT)
Received: by apex04.apex.microserve.com with Internet Mail Service (5.5.2448.0)
       id <PB4D5NZC>; Thu, 22 Jul 1999 13:54:07 -0400
Message-Id: <51B997C456C7D2119C6A004005A406DA02B52C@apex04.apex.microserve.com>
Date: Thu, 22 Jul 1999 13:54:05 -0400
Reply-To: [email protected]
Sender: [email protected]
From: Mike Handley <[email protected]>
To: "'Ian Willis'" <[email protected]>, Mike Handley <[email protected]>
Cc: [email protected]
Subject: RE: Automatically renaming files for anonymous users.
MIME-Version: 1.0
Content-Type: text/plain;
       charset="iso-8859-1"
X-Mailer: Internet Mail Service (5.5.2448.0)
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN

> -----Original Message-----
> From: Ian Willis [mailto:[email protected]]
> Sent: Thursday, July 22, 1999 2:13 PM
> To: [email protected]
> Cc: [email protected]
> Subject: Re: Automatically renaming files for anonymous users.
>
>
> wu-ftpd will upload a file to a unique name (by appending .n) when the
> client uses the STOU (Store Unique) command rather than the
> usual STOR.
>
> Changing your customers script to use STOU in place of STOR
> would solve
> the problem, on the standard BSD ftp client the sunique
> command toggles
> between STOR and STOU.
>
> Ian Willis
> SCO Internet Engineering Group, Watford, England
>
> | From: Gregory A Lundberg <[email protected]>
> | Date: Thu, 22 Jul 1999 12:20:59 -0400
> | To: Mike Handley <[email protected]>
> | Cc: WU-FTPD Discussion List <[email protected]>
> | Subject: Re: Automatically renaming files for anonymous users.
> |
> | On Thu, Jul 22, 1999 at 11:04:13AM -0400, Mike Handley wrote:
> |
> | > I have a customer ftping the same file name off of
> serveral differents
> | > workstations to the server.   For some reason, the script
> he is using
> | > will not allow him to specify a different name.  All the
> files are being
> | > ftp'ed in anonymously to an /incoming directory.  Is
> there a way to have
> | > wu-ftp automatically rename the file to filename1 if
> filename already
> | > exists?
> |
> | Nope.  Happy hacking.  Look in src/ftpd.c; search for
> upl_check to get into
> | the right area.  just above you'll see the following line:
> |
> |     if (!overwrite && exists) {
> |
> | If this is true, the daemon currently isues a message and
> refuses the
> | upload.  You'll want to delay this until after upl_check()
> has been called
> | and given its permission for the upload.  Then, just before
> opening the
> | file, you'll want to rename it.
> |
> | You probably should do a little checking in the (!overwrite
> && exists)
> | section.  I'd add an ftpaccess clause which gives
> directories and/or names
> | which this should be done for (take a look at the
> noretrieve logic ..
> | something similar for automatically renaming is what I'm thinking).
> |
> | Gregory A Lundberg              WU-FTPD Development Group
> | 1441 Elmdale Drive              [email protected]
> | Kettering, OH 45409-1615 USA    1-800-809-2195
>

Is there a way to set sunique/runique on by default??

Thanks for all your help.

Mike


From [email protected]  Thu Jul 22 14:00:41 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id OAA11125
       for <[email protected]>; Thu, 22 Jul 1999 14:00:40 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id OAA00596;
       Thu, 22 Jul 1999 14:01:45 -0500 (CDT)
Received: from sco.COM (scol.london.sco.COM [150.126.1.48])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id NAA27572
       for <[email protected]>; Thu, 22 Jul 1999 13:57:14 -0500 (CDT)
Received: from tyne.london.sco.COM(150.126.1.103), claiming to be "tyne.sco.com"
via SMTP by scol.london.sco.COM, id smtpdAAAa001Mu; Thu Jul 22 19:56:13 1999
Message-Id: <[email protected]>
Date: Thu, 22 Jul 99 19:55:52 BST
Reply-To: [email protected]
Sender: [email protected]
From: Ian Willis <[email protected]>
To: [email protected]
Cc: [email protected]
Subject: Re: Automatically renaming files for anonymous users.
X-Mailer: SCO OpenServer Mail Release 5.0
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN

Mike Handley wrote:

| Is there a way to set sunique/runique on by default??

sunique/runique are ftp client commands so will only work if your
customers script is calling a BSD style ftp client. Assuming it is,
you can create a macro named init which will be automatically executed
as the last step in the ftp login process. This is done by creating the
file .netrc in the users home directory containing:

default
macdef init
sunique
runique


(where the runique line is followed by a blank line). To make the
init macro only be executed when connecting to a particular machine,
replace the default line with:

machine remote_machine_name

You should ensure the .netrc file is owned by the user and is only
readable or writable by them, see the systems ftp or netrc manual page
for details.

Ian Willis
SCO Internet Engineering Group, Watford, England

From [email protected]  Thu Jul 22 14:32:55 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id OAA11716
       for <[email protected]>; Thu, 22 Jul 1999 14:32:54 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id OAA13978;
       Thu, 22 Jul 1999 14:33:59 -0500 (CDT)
Received: from mail.vr.net ([email protected] [205.133.13.8])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id OAA28268
       for <[email protected]>; Thu, 22 Jul 1999 14:33:35 -0500 (CDT)
Received: (from lundberg@localhost)
       by mail.vr.net (8.9.3/8.9.3) id PAA05209;
       Thu, 22 Jul 1999 15:33:30 -0400
Message-Id: <[email protected]>
Date: Thu, 22 Jul 1999 15:33:30 -0400
Reply-To: Gregory A Lundberg <[email protected]>
Sender: [email protected]
From: Gregory A Lundberg <[email protected]>
To: Michael Warchut <[email protected]>
Cc: WU-FTPD Discussion List <[email protected]>,
       WU-FTPD Questions <[email protected]>
Subject: Re: Wu-ftpd
In-Reply-To: <[email protected]>; from Michael Warchut on Thu, Jul 22, 1999 at 01:45:24PM -0500
References: <[email protected]>
Mime-Version: 1.0
Content-Type: multipart/signed; boundary=K8nIJk4ghYZn606h; micalg=pgp-md5;
       protocol="application/pgp-signature"
X-Mailer: Mutt 0.95.6i
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN


--K8nIJk4ghYZn606h
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable

On Thu, Jul 22, 1999 at 01:45:24PM -0500, Michael Warchut wrote:

> cc: Error: extensions.c, line 296: #error wu-ftpd on this platform has > =
security deficiencies!!!
> #error  wu-ftpd on this platform has security deficiencies!!!

This means you're trying to build on a platform without a working getcwd()
function.  This is covered in the ERRATA.  Since release, it has been shown
that the portable getcwd() function works for SunOS 4.1 (s41) as well.

You can either:

- decide to live dangerously, edit extensions.c to disable the check, and
  build the daemon using getwd() instead.

or

- take a look at the NeXTstep 3 (nx3) configuration and do the same thing
  for you target system.  If you do this, please let us know by emailing
  [email protected] telling us what you had to change to get it
  to work.

or

- upgrade to a modern Unix system

--=20

Gregory A Lundberg              WU-FTPD Development Group
1441 Elmdale Drive              [email protected]
Kettering, OH 45409-1615 USA    1-800-809-2195

--K8nIJk4ghYZn606h
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5

iQB1AwUBN5dj9g2nXFkJc83RAQEgDQL+PfKScuC0tHHTs40q44w3tqDo+qbuS1Y4
kPV0g32UyGDCxIzUiTg3NXRqQUX+MZwVIjD/YzfTSUywUXDdjeeOPltCRQgvAVNJ
AyLqn9hWawXOlZ/6OzE77lkndfAUkJ+u
=r0hT
-----END PGP SIGNATURE-----

--K8nIJk4ghYZn606h--

From [email protected]  Thu Jul 22 16:36:22 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id QAA13771
       for <[email protected]>; Thu, 22 Jul 1999 16:36:21 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id QAA07683;
       Thu, 22 Jul 1999 16:37:28 -0500 (CDT)
Received: from inet1.woodlandnet.com ([email protected] [209.176.192.9])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id QAA01985
       for <[email protected]>; Thu, 22 Jul 1999 16:30:51 -0500 (CDT)
Received: from mobile-intelligence.com (root@inet2 [209.176.192.10])
       by inet1.woodlandnet.com (8.8.7/8.8.7) with ESMTP id RAA08171
       for <[email protected]>; Thu, 22 Jul 1999 17:30:39 -0400
Message-Id: <[email protected]>
Date: Thu, 22 Jul 1999 23:26:43 +0100
Reply-To: [email protected]
Sender: [email protected]
From: "Douglas C. MacKenzie" <[email protected]>
To: [email protected]
Subject: Server quietly closing connection after large transfer
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
X-Mailer: Mozilla 4.5 [en] (Win98; I)
X-Accept-Language: en
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN

I use ftp nightly to retrieve backup files across a firewall
so a secure machine can write them to tape.  This works fine
as long as the files are small.  However, when the files get large
wu-ftpd quietly closes the connection after retrieving one file
in a mget command.
I'm using Red Hat Linux version 5.2 and wu-ftp version 2.5.0
(wu-ftpd-2.5.0-0.5.2-i386.rpm from the wu-ftpd ftpsite).

My ftp script uses mget since the file names change daily.  It looks
like this:
   mget *
   mdel *
(BTW, It would be nice to have a "move" command  which did a get and
then a delete)

This works fine with files in the 2Mbyte range.
However, if the first file is up in the 250Mbyte range
(252,180,365 bytes is one example) the mget quits after retrieving
only the first file.  The get takes around 940 seconds.

This sounds like I am bumping into either the time or byte transfer
limits.
However there are no log messages on the server and no limits set in
ftpaccess.  The ftp login I'm using is a real user account.

Here is a copy of my /etc/ftpaccess file:

-------------------------------------------------------------------------------------------

class emp real  *
class cust guest  *
class anon  anonymous  *

defumask 002

email [email protected]

noretrieve core
noretrieve /etc/passwd /etc/group

loginfails  3
greeting  brief

readme  README*    login
readme  README*    cwd=*

message /welcome.msg            login
message .message                cwd=*

private    no

compress       yes *
tar            yes *
chmod    no  guest,anonymous
delete   no  anonymous
overwrite  no  anonymous
rename   no  anonymous

log transfers anonymous,real,guest inbound,outbound

shutdown /etc/shutmsg

passwd-check rfc822 warn

#path-filter guest  /etc/pathmsg  ^[-A-Za-z0-9_\.]*$ ^\. ^_

# Users who are members of one of these group in /etc/group will
# be chroot'd the same as anonymous users would be.
guestgroup customer
guestgroup ippost

# Running into problems with backup ftp grabs of 250Meg
byte-limit total 1000000000 real

-------------------------------------------------------------------------------------------

I have the same problem with and without the byte-limit line.

Here is a copy of the session from the clients end:
--------------------------------------------------------------------------------------------

[root@Dot tmp]# s5ftp -i inet1
Connected to inet1.woodlandnet.com.
220 inet1 FTP server ready.
331 Password required for backups.
230 User backups logged in.
cd tars
250 CWD command successful.
binary
200 Type set to I.
mget *.tz
local: inet1_full_1999_07_20.tz remote: inet1_full_1999_07_20.tz
200 PORT command successful.
150 Opening BINARY mode data connection for inet1_full_1999_07_20.tz
(252180365 bytes).
421 Service not available, remote server has closed connection
252180365 bytes received in 9.4e+02 seconds (2.6e+02 Kbytes/s)
local: inet1_inc_1999_07_21.tz remote: inet1_inc_1999_07_21.tz
No control connection for command: Unknown error
local: inet1_inc_1999_07_22.tz remote: inet1_inc_1999_07_22.tz
No control connection for command: Unknown error
Not connected.
quit
-------------------------------------------------------------------------------------------------

If I manually delete the large file from the server after it has been
backup up
everything works fine next time.  However, I tend to forget and get
multiple
backups of the same huge file, while missing the incrementals for a
couple days.

Any suggestions will be appreciated.

   Doug MacKenzie

--
Douglas C. MacKenzie, Ph.D.
Mobile Intelligence Corporation
Voice/Fax: +1 616.554.4639
mailto:[email protected]
http://www.mobile-intelligence.com



From [email protected]  Thu Jul 22 16:42:46 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id QAA13898
       for <[email protected]>; Thu, 22 Jul 1999 16:42:44 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id QAA07483;
       Thu, 22 Jul 1999 16:43:51 -0500 (CDT)
Received: from snoopy.alibris.net ([216.32.189.5])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id QAA29022
       for <[email protected]>; Thu, 22 Jul 1999 16:38:32 -0500 (CDT)
Received: from michelangelo ([216.32.189.2])
       by snoopy.alibris.net (8.8.7/8.8.7) with SMTP id PAA20392
       for <[email protected]>; Thu, 22 Jul 1999 15:47:08 -0700
Message-Id: <[email protected]>
Date: Thu, 22 Jul 1999 14:41:37 -0700
Reply-To: [email protected]
Sender: [email protected]
From: "Michael Warchut" <[email protected]>
To: <[email protected]>
Subject: Cant get OSF-C2 to work..
MIME-Version: 1.0
Content-Type: multipart/alternative;
       boundary="----=_NextPart_000_033A_01BED450.4D858220"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 5.00.2314.1300
X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2314.1300
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN

This is a multi-part message in MIME format.

------=_NextPart_000_033A_01BED450.4D858220
Content-Type: text/plain;
       charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

I have made the changes to the Makfile.du4 as follows:

IFLAGS=3D    -DSECUREOSF
LIBES=3D      -lsecurity


It will compile with no errors yet after I have it copied over the =
working DU ftpd and try to login it fails every time.

Am I missing something.





Michael W. Warchut
Senior Software Developer/SysAdmin
Alibris
1250 45th St
Emeryville, Ca 94608
510-594-4527

------=_NextPart_000_033A_01BED450.4D858220
Content-Type: text/html;
       charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META content=3D"text/html; charset=3Diso-8859-1" =
http-equiv=3DContent-Type>
<META content=3D"MSHTML 5.00.2614.3401" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV><FONT face=3DArial size=3D2>I have made the changes to the =
Makfile.du4 as=20
follows:</FONT></DIV>
<DIV>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D2>IFLAGS=3D&nbsp;&nbsp;&nbsp; =
-DSECUREOSF</FONT></DIV>
<DIV><FONT face=3DArial=20
size=3D2>LIBES=3D&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;-lsecurity</FONT></D=
IV>
<DIV>&nbsp;</DIV>
<DIV>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D2>It will compile with no errors yet =
after I have it=20
copied over the working DU ftpd and try to login it fails every=20
time.</FONT></DIV>
<DIV><BR><FONT face=3DArial size=3D2>Am I missing =
something.</FONT></DIV>
<DIV>&nbsp;</DIV>
<DIV>&nbsp;</DIV>
<DIV>&nbsp;</DIV>
<DIV>&nbsp;</DIV>
<DIV>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D2>Michael W. Warchut<BR>Senior Software=20
Developer/SysAdmin<BR>Alibris<BR>1250 45th St<BR>Emeryville, Ca=20
94608<BR>510-594-4527</FONT></DIV></BODY></HTML>

------=_NextPart_000_033A_01BED450.4D858220--


From [email protected]  Thu Jul 22 16:49:01 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id QAA13989
       for <[email protected]>; Thu, 22 Jul 1999 16:49:00 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id QAA10668;
       Thu, 22 Jul 1999 16:50:07 -0500 (CDT)
Received: from gw1.bfg.com (gateway.bfg.com [131.187.253.2])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id QAA31439
       for <[email protected]>; Thu, 22 Jul 1999 16:49:32 -0500 (CDT)
Received: (from uucp@localhost)
       by gw1.bfg.com (8.9.3/8.9.3) id RAA24380;
       Thu, 22 Jul 1999 17:49:17 -0400 (EDT)
Received: from ns1.bfg.com(192.73.67.20) by gw1.bfg.com via smap (V2.1)
       id sma024221; Thu, 22 Jul 99 17:48:58 -0400
Received: from localhost (keller@localhost)
       by ns1.bfg.com (8.9.3/8.9.3) with ESMTP id RAA14436;
       Thu, 22 Jul 1999 17:48:33 -0400 (EDT)
Message-Id: <[email protected]>
Date: Thu, 22 Jul 1999 17:48:33 -0400 (EDT)
Reply-To: [email protected]
Sender: [email protected]
From: Ted Keller <[email protected]>
To: "Douglas C. MacKenzie" <[email protected]>
Cc: [email protected]
Subject: Re: Server quietly closing connection after large transfer
In-Reply-To: <[email protected]>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN

Douglas,

Verify that your firewall is not shutting down the command port - thus
terminating the session.  Just a thought....

ted keller


On Thu, 22 Jul 1999, Douglas C. MacKenzie wrote:

> I use ftp nightly to retrieve backup files across a firewall
> so a secure machine can write them to tape.  This works fine
> as long as the files are small.  However, when the files get large
> wu-ftpd quietly closes the connection after retrieving one file
> in a mget command.
> I'm using Red Hat Linux version 5.2 and wu-ftp version 2.5.0
> (wu-ftpd-2.5.0-0.5.2-i386.rpm from the wu-ftpd ftpsite).
>
> My ftp script uses mget since the file names change daily.  It looks
> like this:
>     mget *
>     mdel *
> (BTW, It would be nice to have a "move" command  which did a get and
> then a delete)
>
> This works fine with files in the 2Mbyte range.
> However, if the first file is up in the 250Mbyte range
> (252,180,365 bytes is one example) the mget quits after retrieving
> only the first file.  The get takes around 940 seconds.
>
> This sounds like I am bumping into either the time or byte transfer
> limits.
> However there are no log messages on the server and no limits set in
> ftpaccess.  The ftp login I'm using is a real user account.
>
> Here is a copy of my /etc/ftpaccess file:
>
> -------------------------------------------------------------------------------------------
>
> class emp real  *
> class cust guest  *
> class anon  anonymous  *
>
> defumask 002
>
> email [email protected]
>
> noretrieve core
> noretrieve /etc/passwd /etc/group
>
> loginfails  3
> greeting  brief
>
> readme  README*    login
> readme  README*    cwd=*
>
> message /welcome.msg            login
> message .message                cwd=*
>
> private    no
>
> compress       yes *
> tar            yes *
> chmod    no  guest,anonymous
> delete   no  anonymous
> overwrite  no  anonymous
> rename   no  anonymous
>
> log transfers anonymous,real,guest inbound,outbound
>
> shutdown /etc/shutmsg
>
> passwd-check rfc822 warn
>
> #path-filter guest  /etc/pathmsg  ^[-A-Za-z0-9_\.]*$ ^\. ^_
>
> # Users who are members of one of these group in /etc/group will
> # be chroot'd the same as anonymous users would be.
> guestgroup customer
> guestgroup ippost
>
> # Running into problems with backup ftp grabs of 250Meg
> byte-limit total 1000000000 real
>
> -------------------------------------------------------------------------------------------
>
> I have the same problem with and without the byte-limit line.
>
> Here is a copy of the session from the clients end:
> --------------------------------------------------------------------------------------------
>
> [root@Dot tmp]# s5ftp -i inet1
> Connected to inet1.woodlandnet.com.
> 220 inet1 FTP server ready.
> 331 Password required for backups.
> 230 User backups logged in.
> cd tars
> 250 CWD command successful.
> binary
> 200 Type set to I.
> mget *.tz
> local: inet1_full_1999_07_20.tz remote: inet1_full_1999_07_20.tz
> 200 PORT command successful.
> 150 Opening BINARY mode data connection for inet1_full_1999_07_20.tz
> (252180365 bytes).
> 421 Service not available, remote server has closed connection
> 252180365 bytes received in 9.4e+02 seconds (2.6e+02 Kbytes/s)
> local: inet1_inc_1999_07_21.tz remote: inet1_inc_1999_07_21.tz
> No control connection for command: Unknown error
> local: inet1_inc_1999_07_22.tz remote: inet1_inc_1999_07_22.tz
> No control connection for command: Unknown error
> Not connected.
> quit
> -------------------------------------------------------------------------------------------------
>
> If I manually delete the large file from the server after it has been
> backup up
> everything works fine next time.  However, I tend to forget and get
> multiple
> backups of the same huge file, while missing the incrementals for a
> couple days.
>
> Any suggestions will be appreciated.
>
>     Doug MacKenzie
>
> --
> Douglas C. MacKenzie, Ph.D.
> Mobile Intelligence Corporation
> Voice/Fax: +1 616.554.4639
> mailto:[email protected]
> http://www.mobile-intelligence.com
>
>


From [email protected]  Thu Jul 22 16:55:20 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id QAA14065
       for <[email protected]>; Thu, 22 Jul 1999 16:55:20 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id QAA02008;
       Thu, 22 Jul 1999 16:56:27 -0500 (CDT)
Received: from rosebud.ncd.com (rosebud.ncd.com [138.43.212.19])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id QAA25812
       for <[email protected]>; Thu, 22 Jul 1999 16:53:30 -0500 (CDT)
Received: from summanulla.pcx.ncd.com (IDENT:[email protected] [192.86.85.147]) by rosebud.ncd.com (8.9.1/8.6.9) with ESMTP id OAA11210; Thu, 22 Jul 1999 14:52:58 -0700 (PDT)
Received: from summanulla.pcx.ncd.com (IDENT:alano@localhost [127.0.0.1])
       by summanulla.pcx.ncd.com (8.9.3/8.8.7) with ESMTP id GAA08700;
       Fri, 23 Jul 1999 06:50:35 -0700
Message-Id: <[email protected]>
Date: Fri, 23 Jul 1999 06:50:35 -0700
Reply-To: [email protected]
Sender: [email protected]
From: Alan Olsen <[email protected]>
To: [email protected], [email protected]
Subject: Re: Server quietly closing connection after large transfer
In-Reply-To: Your message of "Thu, 22 Jul 1999 23:26:43 BST."
            <[email protected]>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
X-Mailer: exmh version 2.0.2
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN

> I use ftp nightly to retrieve backup files across a firewall
> so a secure machine can write them to tape.  This works fine
> as long as the files are small.  However, when the files get large
> wu-ftpd quietly closes the connection after retrieving one file
> in a mget command.

Do a netstat and see if it is dropping one of the two open ftp ports.  If it
is, then you need to have a talk with your firewall admin and have him check
the tcp timeout.  Have him make sure it has not gotten set to 1.

I had this happen on our firewall after an upgrade.  Drove me nuts for a
couple of weeks until we figured out what happened.



From [email protected]  Mon Jul 26 09:23:54 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id JAA01224
       for <[email protected]>; Mon, 26 Jul 1999 09:23:53 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id JAA13862;
       Mon, 26 Jul 1999 09:22:37 -0500 (CDT)
Received: from ns.intec.edu.do (cor-020-b7.codetel.net.do [207.176.16.20])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id IAA02544
       for <[email protected]>; Mon, 26 Jul 1999 08:42:24 -0500 (CDT)
Received: from ns.intec.edu.do (nat1.intec.edu.do [207.176.16.25])
       by ns.intec.edu.do (8.8.8+Sun/8.8.8) with ESMTP id VAA09718
       for <[email protected]>; Sun, 25 Jul 1999 21:52:30 GMT
Message-Id: <[email protected]>
Date: Sun, 25 Jul 1999 17:48:32 -0500
Reply-To: [email protected]
Sender: [email protected]
From: Carlos Vicente <[email protected]>
To: [email protected]
Subject: Denies access to real users
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
X-Mailer: Mozilla 4.6 [en] (WinNT; I)
X-Accept-Language: en
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN

Hello all.
I just compiled wu-ftpd version 2.5.0 on my RedHat 6.0 box.
Kernel version: 2.2.10
gcc version: egcs-2.91.66 (egcs-1.1.2 release)
Using shadow passwords
Using MD5 algorithm for passwords

Everything seems to work fine except for "real" users access.
When I try to log in it keeps saying :
"530 Login incorrect.
Login failed."

Anonymous access works fine.

I'm fear that the problem comes from using MD5 for /etc/shadow
passwords.
I'm just using it because I read it was more secure than standard
crypt() algorithm.

What can I do?

I would appreciate your help on this.
Thank you very much in advance.
--
Carlos Vicente
RedINTEC
Instituto Tecnologico de Santo Domingo
Republica Dominicana
PGP Key: http://www.intec.edu.do/~cvicente/pgp.key

From [email protected]  Mon Jul 26 10:06:42 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id KAA02099
       for <[email protected]>; Mon, 26 Jul 1999 10:06:41 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id KAA26432;
       Mon, 26 Jul 1999 10:07:35 -0500 (CDT)
Received: from mail.vr.net ([email protected] [205.133.13.8])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id KAA24830
       for <[email protected]>; Mon, 26 Jul 1999 10:02:03 -0500 (CDT)
Received: (from lundberg@localhost)
       by mail.vr.net (8.9.3/8.9.3) id LAA08555;
       Mon, 26 Jul 1999 11:01:48 -0400
Message-Id: <[email protected]>
Date: Mon, 26 Jul 1999 11:01:47 -0400
Reply-To: Gregory A Lundberg <[email protected]>
Sender: [email protected]
From: Gregory A Lundberg <[email protected]>
To: Carlos Vicente <[email protected]>
Cc: [email protected]
Subject: Re: Denies access to real users
In-Reply-To: <[email protected]>; from Carlos Vicente on Sun, Jul 25, 1999 at 05:48:32PM -0500
References: <[email protected]>
Mime-Version: 1.0
Content-Type: multipart/signed; boundary=3lcZGd9BuhuYXNfi; micalg=pgp-md5;
       protocol="application/pgp-signature"
X-Mailer: Mutt 0.95.6i
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN


--3lcZGd9BuhuYXNfi
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable

On Sun, Jul 25, 1999 at 05:48:32PM -0500, Carlos Vicente wrote:

> I just compiled wu-ftpd version 2.5.0 on my RedHat 6.0 box.
> Kernel version: 2.2.10
> gcc version: egcs-2.91.66 (egcs-1.1.2 release)
> Using shadow passwords
> Using MD5 algorithm for passwords
>=20
> Everything seems to work fine except for "real" users access.  When I try
> to log in it keeps saying :
>       530 Login incorrect.
> I'm fear that the problem comes from using MD5 for /etc/shadow passwords.
> I'm just using it because I read it was more secure than standard crypt()
> algorithm.

Since you're using Redhat, I'd suggest using PAM in the demon and letting
PAm handle the issue.

Otherwise, you need to hack ftpd.c in the pass() function to use MD5
instead of crypt.

--=20

Gregory A Lundberg              WU-FTPD Development Group
1441 Elmdale Drive              [email protected]
Kettering, OH 45409-1615 USA    1-800-809-2195

--3lcZGd9BuhuYXNfi
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5

iQB1AwUBN5xqRw2nXFkJc83RAQG09QL+IZfGJ9zk4MSYzx16g16if45OflMZnsAy
UhnVaCPPFDrptg6wuF3WrjEEorYcwVfUdT2LZXUlkVE6J/uRNevcmAkhCaL+Fucb
YZeQtexQQH7D0zifFl8MIsp/oaaJLf78
=LfRI
-----END PGP SIGNATURE-----

--3lcZGd9BuhuYXNfi--

From [email protected]  Mon Jul 26 10:19:39 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id KAA02304
       for <[email protected]>; Mon, 26 Jul 1999 10:19:38 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id KAA24839;
       Mon, 26 Jul 1999 10:20:42 -0500 (CDT)
Received: from ns.intec.edu.do (cor-020-b7.codetel.net.do [207.176.16.20])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id KAA28725
       for <[email protected]>; Mon, 26 Jul 1999 10:16:14 -0500 (CDT)
Received: from ns.intec.edu.do (nat3.intec.edu.do [207.176.16.27])
       by ns.intec.edu.do (8.8.8+Sun/8.8.8) with ESMTP id PAA15562;
       Mon, 26 Jul 1999 15:12:19 GMT
Message-Id: <[email protected]>
Date: Mon, 26 Jul 1999 11:08:15 -0500
Reply-To: [email protected]
Sender: [email protected]
From: Carlos Vicente <[email protected]>
To: Gregory A Lundberg <[email protected]>
Cc: [email protected]
Subject: Re: Denies access to real users
References: <[email protected]> <[email protected]>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
X-Mailer: Mozilla 4.6 [en] (WinNT; I)
X-Accept-Language: en
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN

> Since you're using Redhat, I'd suggest using PAM in the demon and letting
> PAm handle the issue.

How do I do that?

--
Carlos Vicente
RedINTEC
Instituto Tecnologico de Santo Domingo
Republica Dominicana
PGP Key: http://www.intec.edu.do/~cvicente/pgp.key

From [email protected]  Mon Jul 26 10:59:26 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id KAA02991
       for <[email protected]>; Mon, 26 Jul 1999 10:59:25 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id LAA00660;
       Mon, 26 Jul 1999 11:00:27 -0500 (CDT)
Received: from note.orchestra.cse.unsw.EDU.AU ([email protected] [129.94.242.29])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id KAA01346
       for <[email protected]>; Mon, 26 Jul 1999 10:54:12 -0500 (CDT)
Received: From mozart With LocalMail ; Mon, 26 Jul 99 15:36:25 +1000
Message-Id: <Pine.GSO.3.95.990726151813.25854A-100000@mozart.orchestra.cse.unsw.EDU.AU>
Date: Mon, 26 Jul 1999 15:36:25 +1000 (EST)
Reply-To: [email protected]
Sender: [email protected]
From: Wal <[email protected]>
To: [email protected]
Subject: wuftpd2.5.0 denying access...???
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
X-Sender: [email protected]
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN

hello all,

ive compiled and installed wuftd 2.5.0 on a redhat system
running kernel 2.2.5-15.
However it;d not allowing normal users access. Anonymous ftp works
though. ftpaccess is set correctly etc..
Ive compiled and installed this software on 2 other linux machines
and it works perfect..

In the new server, we have tcpwrappers installed but as far as i
can tell, thats working correclty as well..also, we're using shadowed
passwords though its a relatively newlinux system so i think we dont
need to change the code etc as defined in the FAQ...

Ive tried the 2.4.2 rpm and that works correctly on that machine.
so i am really baffled by this..
I dont know what else to  try.


if someone has had similar troubles and/or has any hints for me to try
it would be greatly appreciated

wal


From [email protected]  Mon Jul 26 12:04:17 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id MAA04028
       for <[email protected]>; Mon, 26 Jul 1999 12:04:16 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id MAA08836;
       Mon, 26 Jul 1999 12:05:19 -0500 (CDT)
Received: from peer.guj.de (peer.guj.de [193.7.250.57])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id LAA09034
       for <[email protected]>; Mon, 26 Jul 1999 11:59:43 -0500 (CDT)
Received: by ngjexc11.zd.guj.de with Internet Mail Service (5.5.2448.0)
       id <P46WS13N>; Mon, 26 Jul 1999 18:59:05 +0200
Message-Id: <[email protected]>
Date: Mon, 26 Jul 1999 18:59:05 +0200
Reply-To: [email protected]
Sender: [email protected]
From: gc_team28 <[email protected]>
To: WU-FTP MailingList <[email protected]>
Subject: Trouble with regular-expressions for path-filter (linux vs. solar
       is 2.6)
MIME-Version: 1.0
Content-Type: text/plain;
       charset="iso-8859-1"
Content-Transfer-Encoding: 8bit
X-Mailer: Internet Mail Service (5.5.2448.0)
X-MIME-Autoconverted: from quoted-printable to 8bit by wugate.wustl.edu id LAA04367
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN

A big hello to everybody!

I've got a problem with some regular expressions in the path-filter - statement.

I want to limit the guests to upload only specific types of files.
I use:

path-filter     guest   /usr/local/etc/msgs/pathmsg ^[-A-Za-z0-9_]*(\.html|\.htm|\.txt|\.gif|\.jpg|\.jpeg|\.tar|\.zip)$ ^\. ^-

with Linux and it works.

Now i've set up wu-ftp on sparc solaris 2.6 and the same statement does not work anymore.
Can anybody help me out?


CU
Andr� l�pke

From [email protected]  Mon Jul 26 12:37:42 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id MAA04546
       for <[email protected]>; Mon, 26 Jul 1999 12:37:41 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id MAA00457;
       Mon, 26 Jul 1999 12:38:34 -0500 (CDT)
Received: from mail.vr.net ([email protected] [205.133.13.8])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id MAA14352
       for <[email protected]>; Mon, 26 Jul 1999 12:37:20 -0500 (CDT)
Received: (from lundberg@localhost)
       by mail.vr.net (8.9.3/8.9.3) id NAA09862;
       Mon, 26 Jul 1999 13:37:09 -0400
Message-Id: <[email protected]>
Date: Mon, 26 Jul 1999 13:37:08 -0400
Reply-To: Gregory A Lundberg <[email protected]>
Sender: [email protected]
From: Gregory A Lundberg <[email protected]>
To: gc_team28 <[email protected]>
Cc: WU-FTP MailingList <[email protected]>
Subject: Re: Trouble with regular-expressions for path-filter (linux vs. solar is 2.6)
In-Reply-To: <[email protected]>; from gc_team28 on Mon, Jul 26, 1999 at 06:59:05PM +0200
References: <[email protected]>
Mime-Version: 1.0
Content-Type: multipart/signed; boundary=qDbXVdCdHGoSgWSk; micalg=pgp-md5;
       protocol="application/pgp-signature"
X-Mailer: Mutt 0.95.6i
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN


--qDbXVdCdHGoSgWSk
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable

On Mon, Jul 26, 1999 at 06:59:05PM +0200, gc_team28 wrote:

> I want to limit the guests to upload only specific types of files.  I
> use:
>=20
> path-filter     guest   /usr/local/etc/msgs/pathmsg ^[-A-Za-z0-9_]*(\.htm=
l|\.htm|\.txt|\.gif|\.jpg|\.jpeg|\.tar|\.zip)$ ^\. ^-
>=20
> with Linux and it works.
>=20
> Now i've set up wu-ftp on sparc solaris 2.6 and the same statement does
> not work anymore.  Can anybody help me out?=20

I don't have a Solaris box, but I'd say you're not using a regular
expression library which supports this.  I'd try installing the GNU library
and linking with it.

--=20

Gregory A Lundberg              WU-FTPD Development Group
1441 Elmdale Drive              [email protected]
Kettering, OH 45409-1615 USA    1-800-809-2195

--qDbXVdCdHGoSgWSk
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5

iQB1AwUBN5yOqg2nXFkJc83RAQHtYgL+M/vte40A406Lupm7zYm+2ey4LcKvAF3+
uZxl2ZdHESUtykZch2Ur6h4i4Yk5vIo9tBC2NF5V7QPCkxNv07rKvC6zEwJlQGhg
UdwW1PJyrkO8iVeEuhdmuNarunts7IBA
=8T1G
-----END PGP SIGNATURE-----

--qDbXVdCdHGoSgWSk--

From [email protected]  Mon Jul 26 12:43:41 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id MAA04681
       for <[email protected]>; Mon, 26 Jul 1999 12:43:40 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id MAA14566;
       Mon, 26 Jul 1999 12:44:46 -0500 (CDT)
Received: from mail.vr.net ([email protected] [205.133.13.8])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id MAA12274
       for <[email protected]>; Mon, 26 Jul 1999 12:38:35 -0500 (CDT)
Received: (from lundberg@localhost)
       by mail.vr.net (8.9.3/8.9.3) id NAA09884;
       Mon, 26 Jul 1999 13:38:21 -0400
Message-Id: <[email protected]>
Date: Mon, 26 Jul 1999 13:38:21 -0400
Reply-To: Gregory A Lundberg <[email protected]>
Sender: [email protected]
From: Gregory A Lundberg <[email protected]>
To: Wal <[email protected]>
Cc: [email protected]
Subject: Re: wuftpd2.5.0 denying access...???
In-Reply-To: <Pine.GSO.3.95.990726151813.25854A-100000@mozart.orchestra.cse.unsw.EDU.AU>; from Wal on Mon, Jul 26, 1999 at 03:36:25PM +1000
References: <Pine.GSO.3.95.990726151813.25854A-100000@mozart.orchestra.cse.unsw.EDU.AU>
Mime-Version: 1.0
Content-Type: multipart/signed; boundary=gj572EiMnwbLXET9; micalg=pgp-md5;
       protocol="application/pgp-signature"
X-Mailer: Mutt 0.95.6i
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN


--gj572EiMnwbLXET9
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable

On Mon, Jul 26, 1999 at 03:36:25PM +1000, Wal wrote:

> Ive tried the 2.4.2 rpm and that works correctly on that machine.  so i
> am really baffled by this..  I dont know what else to  try.

Try the 2.5.0 RPM.

--=20

Gregory A Lundberg              WU-FTPD Development Group
1441 Elmdale Drive              [email protected]
Kettering, OH 45409-1615 USA    1-800-809-2195

--gj572EiMnwbLXET9
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5

iQB1AwUBN5yO9w2nXFkJc83RAQFKOgL9HnvD1HOVLcGBsnJKR9D2/SMZiEXYUECq
1DW9BbXJGC0N/F+xzcpIEGtSqNFIA6A7ojhFT68bTdE7HLh4D4JF+JN9eYc7ntbr
lb85mdqp1Y6KjCnq9V5epD1yc35M4W8h
=1SnJ
-----END PGP SIGNATURE-----

--gj572EiMnwbLXET9--

From [email protected]  Mon Jul 26 12:50:14 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id MAA04767
       for <[email protected]>; Mon, 26 Jul 1999 12:50:14 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id MAA12801;
       Mon, 26 Jul 1999 12:51:18 -0500 (CDT)
Received: from mxsuncenter1.uscs.com (mxsuncenter1.uscs.com [165.79.16.80])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id MAA15654
       for <[email protected]>; Mon, 26 Jul 1999 12:50:25 -0500 (CDT)
Received: by mxsuncenter1.uscs.com with Internet Mail Service (5.5.2448.0)
       id <PV9Q41PR>; Mon, 26 Jul 1999 10:52:47 -0700
Message-Id: <[email protected]>
Date: Mon, 26 Jul 1999 10:52:50 -0700
Reply-To: [email protected]
Sender: [email protected]
From: "Niesz, Russell" <[email protected]>
To: "'[email protected]'" <[email protected]>
Subject: ls works but dir does not!!!!
MIME-Version: 1.0
Content-Type: text/plain;
       charset="iso-8859-1"
X-Mailer: Internet Mail Service (5.5.2448.0)
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN


Here is the rundown on my problem

I have a user setup in a guestgroup
when he logs in he can ls and he gets a file listing.
when he does "ls -l" it says:

150 Opening ASCII mode data connection for /bin/ls.
226 Trasnfer complete.

but no files were ever listed. the same thing happens with dir.
I can chroot my shell to the users home directory and ls -l works fine.

Any help would be GREATLEY appreciated. Please respond to me privately
because I just got on the list and may not get the response until I am
accepted. I will post a summary of the problem/solution to the list when I
am on.


Thanks a ton
Russell J Niesz




From [email protected]  Mon Jul 26 13:16:42 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id NAA05238
       for <[email protected]>; Mon, 26 Jul 1999 13:16:41 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id NAA00273;
       Mon, 26 Jul 1999 13:17:41 -0500 (CDT)
Received: from mail.vr.net ([email protected] [205.133.13.8])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id NAA02839
       for <[email protected]>; Mon, 26 Jul 1999 13:13:55 -0500 (CDT)
Received: (from lundberg@localhost)
       by mail.vr.net (8.9.3/8.9.3) id OAA10259;
       Mon, 26 Jul 1999 14:13:46 -0400
Message-Id: <[email protected]>
Date: Mon, 26 Jul 1999 14:13:45 -0400
Reply-To: Gregory A Lundberg <[email protected]>
Sender: [email protected]
From: Gregory A Lundberg <[email protected]>
To: "Niesz, Russell" <[email protected]>
Cc: "'[email protected]'" <[email protected]>
Subject: Re: ls works but dir does not!!!!
In-Reply-To: <[email protected]>; from Niesz, Russell on Mon, Jul 26, 1999 at 10:52:50AM -0700
References: <[email protected]>
Mime-Version: 1.0
Content-Type: multipart/signed; boundary=1UWUbFP1cBYEclgG; micalg=pgp-md5;
       protocol="application/pgp-signature"
X-Mailer: Mutt 0.95.6i
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN


--1UWUbFP1cBYEclgG
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable

On Mon, Jul 26, 1999 at 10:52:50AM -0700, Niesz, Russell wrote:

> I have a user setup in a guestgroup when he logs in he can ls and he gets
> a file listing.  when he does "ls -l" it says:=20
>=20
> 150 Opening ASCII mode data connection for /bin/ls.
> 226 Trasnfer complete.
>=20
> but no files were ever listed. the same thing happens with dir.  I can
> chroot my shell to the users home directory and ls -l works fine.
>=20
> Any help would be GREATLEY appreciated. Please respond to me privately
> because I just got on the list and may not get the response until I am
> accepted. I will post a summary of the problem/solution to the list when
> I am on.

Run through the Guest HOWTO.  If the chroot test works, and the user cannot
LIST (ls command), then check the user is chroot'd where you think they
are.

--=20

Gregory A Lundberg              WU-FTPD Development Group
1441 Elmdale Drive              [email protected]
Kettering, OH 45409-1615 USA    1-800-809-2195

--1UWUbFP1cBYEclgG
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5

iQB1AwUBN5yXRA2nXFkJc83RAQG1eQL/aozwNV2PjOX51H5HeBqIntth4NsZVzaZ
Ce4X6L2H9RSOsnDw7JJC5fkSdRA0vtQEDfx7TG23w+mqsdX86SWg/GJ/zaY7oxHT
WcvE2etoiWekyy1wWKN0J/3dItYZgYg9
=zg5S
-----END PGP SIGNATURE-----

--1UWUbFP1cBYEclgG--

From [email protected]  Mon Jul 26 18:02:57 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id SAA10312
       for <[email protected]>; Mon, 26 Jul 1999 18:02:56 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id SAA24585;
       Mon, 26 Jul 1999 18:04:00 -0500 (CDT)
Received: from europe.std.com (europe.std.com [199.172.62.20])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id RAA06268
       for <[email protected]>; Mon, 26 Jul 1999 17:58:42 -0500 (CDT)
Received: from world.std.com by europe.std.com (STD1.2/BZS-8-1.0)
       id SAA09138; Mon, 26 Jul 1999 18:58:41 -0400 (EDT)
Received: from localhost by world.std.com (TheWorld/Spike-2.0)
       id AA07394; Mon, 26 Jul 1999 18:58:41 -0400
Message-Id: <[email protected]>
Date: Mon, 26 Jul 1999 18:58:41 -0400 (EDT)
Reply-To: [email protected]
Sender: [email protected]
From: Greg Mortensen <[email protected]>
To: [email protected]
Subject: Re: Trouble with regular-expressions for path-filter (linux vs. solar is 2.6)
In-Reply-To: <[email protected]>
Mime-Version: 1.0
Content-Type: MULTIPART/MIXED; BOUNDARY="-1068857083-884276170-933029921=:25650"
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN

 This message is in MIME format.  The first part should be readable text,
 while the remaining parts are likely unreadable without MIME-aware tools.
 Send mail to [email protected] for more info.

---1068857083-884276170-933029921=:25650
Content-Type: TEXT/PLAIN; charset=US-ASCII

On Mon, 26 Jul 1999, Gregory A Lundberg wrote:

> On Mon, Jul 26, 1999 at 06:59:05PM +0200, gc_team28 wrote:
>
> > I want to limit the guests to upload only specific types of files.  I
> > use:
> >
> > path-filter     guest   /usr/local/etc/msgs/pathmsg ^[-A-Za-z0-9_]*(\.html|\.htm|\.txt|\.gif|\.jpg|\.jpeg|\.tar|\.zip)$ ^\. ^-
> >
> > with Linux and it works.
> >
> > Now i've set up wu-ftp on sparc solaris 2.6 and the same statement does
> > not work anymore.  Can anybody help me out?
>
> I don't have a Solaris box, but I'd say you're not using a regular
> expression library which supports this.  I'd try installing the GNU library
> and linking with it.

If you're using GNU regex v0.12, put regex.h and regex.c in the wu-ftpd
src directory, and apply the attached patch.  You'll also get [:space:]
support, as well.

 Regards,
   Greg

\|/   ___   \|/        [email protected]        +----- 2048/83C90191 -----+
@~./'O o`\.~@                                   | 0B 65 E0 58 F3 F9 81 F5 |
/__( \___/ )__\  Crypto, Security, and Phrack:   | F0 72 75 FA 1E BD C9 66 |
  `\__`U_/'       http://world.std.com/~loki    +--- via Finger or WWW ---+

---1068857083-884276170-933029921=:25650
Content-Type: TEXT/PLAIN; charset=US-ASCII; name="path-filter.diff"
Content-Transfer-Encoding: BASE64
Content-ID: <[email protected]>
Content-Description:
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---1068857083-884276170-933029921=:25650--

From [email protected]  Tue Jul 27 09:52:15 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id JAA11732
       for <[email protected]>; Tue, 27 Jul 1999 09:52:13 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id JAA03385;
       Tue, 27 Jul 1999 09:53:14 -0500 (CDT)
Received: from orr.pwgsc.gc.ca (orr.pwgsc.gc.ca [198.103.167.14])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id JAA31986
       for <[email protected]>; Tue, 27 Jul 1999 09:48:39 -0500 (CDT)
Received:       id KAA12985; Tue, 27 Jul 1999 10:46:02 -0400
Received: by gateway ???
Received: by gateway id KAA17425
       for <[email protected]>; Tue, 27 Jul 1999 10:33:42 -0400 (EDT)
Message-Id: <[email protected]>
Date: Tue, 27 Jul 1999 10:50:39 -0700
Reply-To: [email protected]
Sender: [email protected]
From: Rocke Robertson <[email protected]>
To: wuftpd <[email protected]>
Subject: What does this log entry mean?
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="------------3C9463490DEEB0139635385B"
X-Mailer: Mozilla 4.5 [en] (WinNT; U)
X-Accept-Language: en
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN

This is a multi-part message in MIME format.
--------------3C9463490DEEB0139635385B
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit

Solaris 2.6, wu 2.5.0

/var/adm/messages says....

Jul 27 09:51:04 woody ftpd[16080]: FTP LOGIN FROM
cr189276-a.slnt1.on.wave.home.com [24.112.87.204], bolamb
Jul 27 09:51:16 woody ftpd[16080]: FTP LOGIN REFUSED (already logged in
as bolamb) FROM cr189276-a.slnt1.on.wave.home.com [24.112.87.204], root
Jul 27 09:51:20 woody ftpd[16080]: FTP session closed

Why does the fourth line make a reference to root ?
Thanks
--
==========================================
Rocke Robertson
PWGSC-GTIS-CPS
Voice (613) 748-4604
Fax   (613) 748-4843
mailto:[email protected]
==========================================
"Did you know that if you play the Win NT 4.0 CD backwards, it plays a
satanic message!"
"Thats nothing! If you play it forwards, it installs Windows NT!!"


--------------3C9463490DEEB0139635385B
Content-Type: text/x-vcard; charset=us-ascii;
name="rocker.vcf"
Content-Transfer-Encoding: 7bit
Content-Description: Card for Rocke Robertson
Content-Disposition: attachment;
filename="rocker.vcf"

begin:vcard
n:991-2604;Rocker UNIX/NT Support
x-mozilla-html:FALSE
version:2.1
email;internet:[email protected]
x-mozilla-cpt:;0
fn:Rocker UNIX/NT Support 991-2604
end:vcard

--------------3C9463490DEEB0139635385B--


From [email protected]  Tue Jul 27 10:54:51 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id KAA12951
       for <[email protected]>; Tue, 27 Jul 1999 10:54:49 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id KAA09995;
       Tue, 27 Jul 1999 10:55:54 -0500 (CDT)
Received: from mxsuncenter1.uscs.com (mxsuncenter1.uscs.com [165.79.16.80])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id KAA09425
       for <[email protected]>; Tue, 27 Jul 1999 10:54:11 -0500 (CDT)
Received: by mxsuncenter1.uscs.com with Internet Mail Service (5.5.2448.0)
       id <PX9N82WP>; Tue, 27 Jul 1999 08:56:32 -0700
Message-Id: <[email protected]>
Date: Tue, 27 Jul 1999 08:56:36 -0700
Reply-To: [email protected]
Sender: [email protected]
From: "Niesz, Russell" <[email protected]>
To: "'Gregory A Lundberg'" <[email protected]>
Cc: "'[email protected]'" <[email protected]>
Subject: RE: ls works but dir does not!!!!
MIME-Version: 1.0
Content-Type: text/plain;
       charset="windows-1252"
X-Mailer: Internet Mail Service (5.5.2448.0)
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN


I went through the guest howto and the chroot test works. Not only that, but
I now have a statically compiled ls in ~ftp/bin/ls. When I do "ls" it works
fine, but when I do "dir" or "ls -l" I still get:

> 150 Opening ASCII mode data connection for /bin/ls.
> 226 Transfer complete.

with no files being listed. I touched a file called iamhere in the ~ftp
directory to make sure that I am chrooted where I think that I am.

Any suggestions would be appreciated.


Thanks again
Russ (frustrated in Sacramento)  :)




-----Original Message-----
From: Gregory A Lundberg [mailto:[email protected]]
Sent: Monday, July 26, 1999 11:14 AM
To: Niesz, Russell
Cc: '[email protected]'
Subject: Re: ls works but dir does not!!!!


On Mon, Jul 26, 1999 at 10:52:50AM -0700, Niesz, Russell wrote:

> I have a user setup in a guestgroup when he logs in he can ls and he gets
> a file listing.  when he does "ls -l" it says:
>
> 150 Opening ASCII mode data connection for /bin/ls.
> 226 Trasnfer complete.
>
> but no files were ever listed. the same thing happens with dir.  I can
> chroot my shell to the users home directory and ls -l works fine.
>
> Any help would be GREATLEY appreciated. Please respond to me privately
> because I just got on the list and may not get the response until I am
> accepted. I will post a summary of the problem/solution to the list when
> I am on.

Run through the Guest HOWTO.  If the chroot test works, and the user cannot
LIST (ls command), then check the user is chroot'd where you think they
are.

--

Gregory A Lundberg              WU-FTPD Development Group
1441 Elmdale Drive              [email protected]
Kettering, OH 45409-1615 USA    1-800-809-2195

From [email protected]  Tue Jul 27 11:00:58 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id LAA13037
       for <[email protected]>; Tue, 27 Jul 1999 11:00:56 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id LAA09884;
       Tue, 27 Jul 1999 11:02:02 -0500 (CDT)
Received: from mxsuncenter1.uscs.com (mxsuncenter1.uscs.com [165.79.16.80])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id LAA11179
       for <[email protected]>; Tue, 27 Jul 1999 11:00:20 -0500 (CDT)
Received: by mxsuncenter1.uscs.com with Internet Mail Service (5.5.2448.0)
       id <PX9N82ZN>; Tue, 27 Jul 1999 09:02:46 -0700
Message-Id: <[email protected]>
Date: Tue, 27 Jul 1999 09:02:51 -0700
Reply-To: [email protected]
Sender: [email protected]
From: "Niesz, Russell" <[email protected]>
To: "'Gregory A Lundberg'" <[email protected]>
Cc: "'[email protected]'" <[email protected]>
Subject: RE: ls works but dir does not!!!!
MIME-Version: 1.0
Content-Type: text/plain;
       charset="windows-1252"
X-Mailer: Internet Mail Service (5.5.2448.0)
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN


turns out the problem was that after I moved the static ls to ~/ftp/bin/, I
never set the mode so that it was executable.........argghh!!!!


Thanks to all that helped.
Russ (whew)



-----Original Message-----
From: Gregory A Lundberg [mailto:[email protected]]
Sent: Monday, July 26, 1999 11:14 AM
To: Niesz, Russell
Cc: '[email protected]'
Subject: Re: ls works but dir does not!!!!


On Mon, Jul 26, 1999 at 10:52:50AM -0700, Niesz, Russell wrote:

> I have a user setup in a guestgroup when he logs in he can ls and he gets
> a file listing.  when he does "ls -l" it says:
>
> 150 Opening ASCII mode data connection for /bin/ls.
> 226 Trasnfer complete.
>
> but no files were ever listed. the same thing happens with dir.  I can
> chroot my shell to the users home directory and ls -l works fine.
>
> Any help would be GREATLEY appreciated. Please respond to me privately
> because I just got on the list and may not get the response until I am
> accepted. I will post a summary of the problem/solution to the list when
> I am on.

Run through the Guest HOWTO.  If the chroot test works, and the user cannot
LIST (ls command), then check the user is chroot'd where you think they
are.

--

Gregory A Lundberg              WU-FTPD Development Group
1441 Elmdale Drive              [email protected]
Kettering, OH 45409-1615 USA    1-800-809-2195

From [email protected]  Tue Jul 27 14:02:24 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id OAA16478
       for <[email protected]>; Tue, 27 Jul 1999 14:02:23 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id OAA31314;
       Tue, 27 Jul 1999 14:03:24 -0500 (CDT)
Received: from mail.vr.net ([email protected] [205.133.13.8])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id NAA32421
       for <[email protected]>; Tue, 27 Jul 1999 13:56:49 -0500 (CDT)
Received: (from lundberg@localhost)
       by mail.vr.net (8.9.3/8.9.3) id OAA25020;
       Tue, 27 Jul 1999 14:56:31 -0400
Message-Id: <[email protected]>
Date: Tue, 27 Jul 1999 14:56:30 -0400
Reply-To: Gregory A Lundberg <[email protected]>
Sender: [email protected]
From: Gregory A Lundberg <[email protected]>
To: Rocke Robertson <[email protected]>
Cc: wuftpd <[email protected]>
Subject: Re: What does this log entry mean?
In-Reply-To: <[email protected]>; from Rocke Robertson on Tue, Jul 27, 1999 at 10:50:39AM -0700
References: <[email protected]>
Mime-Version: 1.0
Content-Type: multipart/signed; boundary=4zI0WCX1RcnW9Hbu; micalg=pgp-md5;
       protocol="application/pgp-signature"
X-Mailer: Mutt 0.95.6i
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN


--4zI0WCX1RcnW9Hbu
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable

On Tue, Jul 27, 1999 at 10:50:39AM -0700, Rocke Robertson wrote:

> Jul 27 09:51:04 woody ftpd[16080]: FTP LOGIN FROM cr189276-a.slnt1.on.wav=
e.home.com [24.112.87.204], bolamb
> Jul 27 09:51:16 woody ftpd[16080]: FTP LOGIN REFUSED (already logged in a=
s bolamb) FROM cr189276-a.slnt1.on.wave.home.com [24.112.87.204], root
> Jul 27 09:51:20 woody ftpd[16080]: FTP session closed
>=20
> Why does the fourth line make a reference to root ?

A user logged into your server then attempted to log in again as root.  The
following command sequence will produce this:

USER bolamb
PASS <bolamb's password>
USER root
QUIT

Or, using a BSD-style ftp client:

$ ftp ftp.wu-ftpd.org
Connected to ftp.wu-ftpd.org.
220 ftp.wu-ftpd.org FTP server ready.
Name (ftp.wu-ftpd.org:lundberg): ftp
331 Guest login ok, send your complete e-mail address as password.
Password:
230-Welcome to the FTP server for the WU-FTPD Development Group
230-
230-This server is the primary distribution site for the WU-FTPD daemon.
230-
230-The pub directory contains the distribution and supporting files.
230-
230-If you are uploading contributions, please place them in the incoming
230-directory and email [email protected] announcing your upload.
230-
230 Guest login ok, access restrictions apply.
Remote system type is UNIX.
Using binary mode to transfer files.
ftp> user root
530 Already logged in.
Login failed.
ftp> quit
221-You have transferred 0 bytes in 0 files.
221-Total traffic for this session was 644 bytes in 0 transfers.
221-Thank you for using the FTP service on ftp.wu-ftpd.org.
221 Goodbye.

--=20

Gregory A Lundberg              WU-FTPD Development Group
1441 Elmdale Drive              [email protected]
Kettering, OH 45409-1615 USA    1-800-809-2195

--4zI0WCX1RcnW9Hbu
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5

iQB1AwUBN53yxA2nXFkJc83RAQEBZQL/VQQ3corzMaoUynupqQEFBY8G0z2aLhEC
wuNjntwJuD5Z23vfLv5XCgjxrnGHZpoR8V9ukZmTFVb1nZOgPneOLRmKpJQMhBHw
C2n6II/7xL9CWi3itcq/HtZMnQKGFzFr
=jtYg
-----END PGP SIGNATURE-----

--4zI0WCX1RcnW9Hbu--

From [email protected]  Tue Jul 27 17:49:11 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id RAA20275
       for <[email protected]>; Tue, 27 Jul 1999 17:49:10 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id RAA24337;
       Tue, 27 Jul 1999 17:50:16 -0500 (CDT)
Received: from ljcqs016.cnf.com ([205.185.108.239])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id RAA15903
       for <[email protected]>; Tue, 27 Jul 1999 17:44:44 -0500 (CDT)
Received: from cnfvs008.cnf.com (localhost [127.0.0.1])
       by ljcqs016.cnf.com (8.8.7/8.8.7) with ESMTP id PAA25658;
       Tue, 27 Jul 1999 15:43:34 -0700 (PDT)
Received: by cnfvs008.cnf.com with Internet Mail Service (5.5.2448.0)
       id <PX0JRJBS>; Tue, 27 Jul 1999 15:43:28 -0700
Message-Id: <[email protected]>
Date: Tue, 27 Jul 1999 15:43:27 -0700
Reply-To: [email protected]
Sender: [email protected]
From: "Peniak, Rick - MLG" <[email protected]>
To: "'[email protected]'" <[email protected]>, [email protected]
Cc: "Peniak, Rick - MLG" <[email protected]>, [email protected]
Subject: benefits of wu-ftpd with a certain senario?
MIME-Version: 1.0
Content-Type: text/plain
X-Mailer: Internet Mail Service (5.5.2448.0)
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN

Hi everyone,

I am trying to find out some information for my boss. In particular, he is
interested to know what advantages wu-ftpd (2.5.0) would give him over the
stock ftpd if he wanted to set up an ftp server along with a few incoming
directories for people to dump stuff off in. He is interested in more then
just "wu-ftpd has fixed security holes and is just more secure". He would
like to know what these specific added security features are. If anyone
could help, I would really appreciate it, and it would make my job much
easier.

Thank you very much.

Rick.


From [email protected]  Thu Jul 29 03:35:21 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id DAA19495
       for <[email protected]>; Thu, 29 Jul 1999 03:35:20 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id DAA10059;
       Thu, 29 Jul 1999 03:36:19 -0500 (CDT)
Received: from xenia.mc2.renault.fr ([email protected] [193.194.133.5])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id DAA09713
       for <[email protected]>; Thu, 29 Jul 1999 03:34:19 -0500 (CDT)
Received: from univers.mc2.renault.fr by xenia.mc2.renault.fr id KAA28233 for <[email protected]>; Thu, 29 Jul 1999 10:34:32 +0200 (MET DST)
Received: from kitten.pdj.renault.fr by univers.mc2.renault.fr id KAA01223 for <[email protected]>; Thu, 29 Jul 1999 10:34:15 +0200 (MET DST)
Received: by kitten id JAA25306 for <[email protected]>; Thu, 29 Jul 1999 09:49:31 +0200 (MET DST)
Received: by goblin id KAA23393 for <[email protected]>; Thu, 29 Jul 1999 10:33:50 +0200 (MET DST)
Message-Id: <[email protected]>
Date: Thu, 29 Jul 1999 10:33:50 +0200
Reply-To: [email protected]
Sender: [email protected]
From: Charles Bruneteau <[email protected]>
To: ML wuftpd <[email protected]>
Subject: Homedir matching in Upload line
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
X-Sender: [email protected]
X-Mailer: Mozilla 4.08 [en] (X11; I; SunOS 5.5.1 sun4u)
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN

hi,

i've set up a chroot'ed environment in /opt/ftp.
in.ftpd is launched with the argument "-r/opt/ftp". Every user is
declared in /opt/ftp/etc/passwd & /opt/ftp/etc/shadow. We have two type
of users: let's say minor and major. A minor user "belongs" to a major
one. The home directory of a major user will be /majoruser1, and a minor
user will have /majoruser1/minoruser1. Thus we will have this type of
tree :

/majoruser1/minoruser1
/majoruser1/minoruser20
..
/majoruser3/minoruser4
/majoruser3/minoruser6

every user is considered as a real user and is restricted to his
homedirectory (restricted-gid clause).

then comes my problem : i want to distinguish minor and major user
upload rights. so i add these two lines:

upload relative /*/* /*/* yes * majorgroup 0600 nodirs
upload relative /* /*/* yes * minorgroup 0640 nodirs

when i log in as minoruser1 and i upload a file, the second upload line
is taken and rights will be 640 although the homedir is
/majoruser1/minoruser1.

I think the best match for this homedirectory should be /*/* ?

my purpose is that i don't want to allow minoruser1 to read a file he
has uploaded (minor users are considered insecure...).

i tried with 2.5.0 and 2.4.2vr17.

regards

Charles Bruneteau

From [email protected]  Thu Jul 29 09:39:42 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id JAA24725
       for <[email protected]>; Thu, 29 Jul 1999 09:39:41 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id JAA27036;
       Thu, 29 Jul 1999 09:40:42 -0500 (CDT)
Received: from mail.vr.net ([email protected] [205.133.13.8])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id JAA21487
       for <[email protected]>; Thu, 29 Jul 1999 09:38:21 -0500 (CDT)
Received: (from lundberg@localhost)
       by mail.vr.net (8.9.3/8.9.3) id KAA18366;
       Thu, 29 Jul 1999 10:38:00 -0400
Message-Id: <[email protected]>
Date: Thu, 29 Jul 1999 10:38:00 -0400
Reply-To: Gregory A Lundberg <[email protected]>
Sender: [email protected]
From: Gregory A Lundberg <[email protected]>
To: Charles Bruneteau <[email protected]>
Cc: ML wuftpd <[email protected]>
Subject: Re: Homedir matching in Upload line
In-Reply-To: <[email protected]>; from Charles Bruneteau on Thu, Jul 29, 1999 at 10:33:50AM +0200
References: <[email protected]>
Mime-Version: 1.0
Content-Type: multipart/signed; boundary=IJpNTDwzlM2Ie8A6; micalg=pgp-md5;
       protocol="application/pgp-signature"
X-Mailer: Mutt 0.95.6i
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN


--IJpNTDwzlM2Ie8A6
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable

On Thu, Jul 29, 1999 at 10:33:50AM +0200, Charles Bruneteau wrote:

> hi,
>=20
> i've set up a chroot'ed environment in /opt/ftp.=20
> in.ftpd is launched with the argument "-r/opt/ftp". Every user is
> declared in /opt/ftp/etc/passwd & /opt/ftp/etc/shadow. We have two type
> of users: let's say minor and major. A minor user "belongs" to a major
> one. The home directory of a major user will be /majoruser1, and a minor
> user will have /majoruser1/minoruser1. Thus we will have this type of
> tree :
>=20
> /majoruser1/minoruser1
> /majoruser1/minoruser20
> ...
> /majoruser3/minoruser4
> /majoruser3/minoruser6
>=20
> every user is considered as a real user and is restricted to his
> homedirectory (restricted-gid clause).
>=20
> then comes my problem : i want to distinguish minor and major user
> upload rights. so i add these two lines:=20
>=20
> upload relative /*/* /*/* yes * majorgroup 0600 nodirs
> upload relative /* /*/* yes * minorgroup 0640 nodirs
>=20
> when i log in as minoruser1 and i upload a file, the second upload line
> is taken and rights will be 640 although the homedir is
> /majoruser1/minoruser1.=20
>=20
> I think the best match for this homedirectory should be /*/* ?=20
>=20
> my purpose is that i don't want to allow minoruser1 to read a file he
> has uploaded (minor users are considered insecure...).

Some comments:

- Your users are all 'real' in the sense they exist in the Unix
  environment.  For WU-FTPD, you should make them all 'guest'; they're
  still Unix-real, but cannot leave their restricted area.

  All users shoul be considered insecure.  The question is their level of
  hostility.  From what you're saying, you consider minor users
  potentially more hostile than major users.

- The restricted-uid/restricted-gid clause should not be considered secure
  unless used within a chroot'd environment.  There simply is not enough
  history for this feature to know if there may be problems with it.

- The "relative" phrase could be getting in the way.

- If you're using wildcards in the pathname parameters you need to be VERY
  VERY carefull.  They will match a lot more than you probably intended.

Here's how I'd set this up:

drwxr-xr-x root     root     /home/users
d--x--x--x root     root     /home/users/bin
d--x--x--x root     root     /home/users/dev
d--x--x--x root     root     /home/users/etc
drwxrwx--t maj1     maj1     /home/users/maj1
drwxr-xr-x root     root     /home/users/maj1/users
drwxrwx--- maj1min1 maj1     /home/users/maj1/users/maj1min1
drwxrwx--- maj1min2 maj1     /home/users/maj1/users/maj1min2
drwxrwx--- maj1min3 maj1     /home/users/maj1/users/maj1min3
drwxrwx--t maj2     maj2     /home/users/maj2
drwxr-xr-x root     root     /home/users/maj2/users
drwxrwx--- maj2min1 maj2     /home/users/maj2/users/maj2min1
drwxrwx--- maj2min2 maj2     /home/users/maj2/users/maj2min2
drwxrwx--- maj2min3 maj2     /home/users/maj2/users/maj2min3
drwxrwx--t maj3     maj3     /home/users/maj3
drwxr-xr-x root     root     /home/users/maj3/users
drwxrwx--- maj3min1 maj3     /home/users/maj3/users/maj3min1
drwxrwx--- maj3min2 maj3     /home/users/maj3/users/maj3min2
drwxrwx--- maj3min3 maj3     /home/users/maj3/users/maj3min3

### /etc/passwd
maj1:XXXXX:10000:10000::/home/users/maj1:bin/sh
maj1min1:X:10001:10001::/home/users/maj1/users/min1:/bin/sh
maj1min2:X:10002:10002::/home/users/maj1/users/min2:/bin/sh
maj1min3:X:10003:10003::/home/users/maj1/users/min3:/bin/sh
maj2:XXXXX:20000:20000::/home/users/maj2:bin/sh
maj2min1:X:20001:20001::/home/users/maj2/users/min1:/bin/sh
maj2min2:X:20002:20002::/home/users/maj2/users/min2:/bin/sh
maj2min3:X:20003:20003::/home/users/maj2/users/min3:/bin/sh
maj3:XXXXX:30000:30000::/home/users/maj3:bin/sh
maj3min1:X:30001:30001::/home/users/maj3/users/min1:/bin/sh
maj3min2:X:30002:30002::/home/users/maj3/users/min2:/bin/sh
maj3min3:X:30003:30003::/home/users/maj3/users/min3:/bin/sh

### /etc/group
maj1::10000:maj1
maj1min1::10001:maj1,maj1min1
maj1min2::10002:maj1,maj1min2
maj1min3::10003:maj1,maj1min3
maj2::20000:maj2
maj2min1::20001:maj2,maj2min1
maj2min2::20002:maj2,maj2min2
maj2min3::20003:maj2,maj3min3
maj3::30000:maj3
maj3min1::30003:maj3,maj1min3
maj3min2::30002:maj3,maj3min2
maj3min3::30003:maj3,maj3min3

### /home/users/etc/passwd
maj1::10000:10000::/maj1:
maj1min1::10001:10001::/maj1/users/min1:
maj1min2::10002:10002::/maj1/users/min2:
maj1min3::10003:10003::/maj1/users/min3:
maj2::20000:20000::/maj2:
maj2min1::20001:20001::/maj2/users/min1:
maj2min2::20002:20002::/maj2/users/min2:
maj2min3::20003:20003::/maj2/users/min3:
maj3::30000:30000::/maj3:
maj3min1::30001:30001::/maj3/users/min1:
maj3min2::30002:30002::/maj3/users/min2:
maj3min3::30003:30003::/maj3/users/min3:

### /home/users/etc/group
maj1::10000:
maj1min1::10001:
maj1min2::10002:
maj1min3::10003:
maj2::20000:
maj2min1::20001:
maj2min2::20002:
maj2min3::20003:
maj3::30000:
maj3min1::30001:
maj3min2::30002:
maj3min3::30003:

### etc/ftpaccess

class user guest *
guestuser *
restricted-uid *
guest-root /home/users

noretrieve core
# Everyone is restricted-uid and cannot get here, but just to be sure...
noretrieve /home/users/bin/
noretrieve /home/users/dev/
noretrieve /home/users/etc/
upload /home/users/*         /        no
upload /home/users/*         /bin     no
upload /home/users/*         /dev     no
upload /home/users/*         /etc     no
upload /home/users/*/users/* /        no
upload /home/users/*/users/* /bin     no
upload /home/users/*/users/* /dev     no
upload /home/users/*/users/* /etc     no
upload /home/users/*/users/* /*/users no

# Major users
upload /home/users/* *          yes nodirs
upload /home/users/* /*/users   no
upload /home/users/* /*/users/* yes * * 0460 nodirs

# Minor users
upload /home/users/*/users/* *          no
upload /home/users/*/users/* /*/users/* yes * * 0260 nodirs

--=20

Gregory A Lundberg              WU-FTPD Development Group
1441 Elmdale Drive              [email protected]
Kettering, OH 45409-1615 USA    1-800-809-2195

--IJpNTDwzlM2Ie8A6
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5

iQB0AwUBN6BZMg2nXFkJc83RAQFQyAL4gKq5/JZyZDRdCLIEh9pQtCoU0QYoMMJp
VoFu2WZso+LsD005/1gAZXeB+rbNZw1WiQUrKNSJrjNvgE6ITjOYk4ULSihAT03a
9lX9IOlqqBckuLBbKEAEZxTMqioDHZo=
=jGjR
-----END PGP SIGNATURE-----

--IJpNTDwzlM2Ie8A6--

From [email protected]  Thu Jul 29 10:19:11 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id KAA25406
       for <[email protected]>; Thu, 29 Jul 1999 10:19:10 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id KAA30958;
       Thu, 29 Jul 1999 10:20:15 -0500 (CDT)
Received: from xenia.mc2.renault.fr ([email protected] [193.194.133.5])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id KAA29898
       for <[email protected]>; Thu, 29 Jul 1999 10:15:02 -0500 (CDT)
Received: from univers.mc2.renault.fr by xenia.mc2.renault.fr id RAA13233; Thu, 29 Jul 1999 17:15:12 +0200 (MET DST)
Received: from kitten.pdj.renault.fr by univers.mc2.renault.fr id RAA11958; Thu, 29 Jul 1999 17:14:54 +0200 (MET DST)
Received: by kitten id QAA28530; Thu, 29 Jul 1999 16:30:09 +0200 (MET DST)
Received: by goblin id RAA24240; Thu, 29 Jul 1999 17:14:28 +0200 (MET DST)
Message-Id: <[email protected]>
Date: Thu, 29 Jul 1999 17:14:28 +0200
Reply-To: [email protected]
Sender: [email protected]
From: Charles Bruneteau <[email protected]>
To: Gregory A Lundberg <[email protected]>,
       ML wuftpd <[email protected]>
Subject: Re: Homedir matching in Upload line
References: <[email protected]> <[email protected]>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
X-Sender: [email protected]
X-Mailer: Mozilla 4.08 [en] (X11; I; SunOS 5.5.1 sun4u)
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN

Gregory A Lundberg wrote:
>
> On Thu, Jul 29, 1999 at 10:33:50AM +0200, Charles Bruneteau wrote:
>
> > hi,
> >
> > i've set up a chroot'ed environment in /opt/ftp.
> > in.ftpd is launched with the argument "-r/opt/ftp". Every user is
> > declared in /opt/ftp/etc/passwd & /opt/ftp/etc/shadow. We have two type
> > of users: let's say minor and major. A minor user "belongs" to a major
> > one. The home directory of a major user will be /majoruser1, and a minor
> > user will have /majoruser1/minoruser1. Thus we will have this type of
> > tree :
> >
> > /majoruser1/minoruser1
> > /majoruser1/minoruser20
> > ...
> > /majoruser3/minoruser4
> > /majoruser3/minoruser6
> >
> > every user is considered as a real user and is restricted to his
> > homedirectory (restricted-gid clause).
> >
> > then comes my problem : i want to distinguish minor and major user
> > upload rights. so i add these two lines:
> >
> > upload relative /*/* /*/* yes * majorgroup 0600 nodirs
> > upload relative /* /*/* yes * minorgroup 0640 nodirs
> >
> > when i log in as minoruser1 and i upload a file, the second upload line
> > is taken and rights will be 640 although the homedir is
> > /majoruser1/minoruser1.
> >
> > I think the best match for this homedirectory should be /*/* ?
> >
> > my purpose is that i don't want to allow minoruser1 to read a file he
> > has uploaded (minor users are considered insecure...).
>
> Some comments:
>
>  - Your users are all 'real' in the sense they exist in the Unix
>    environment.  For WU-FTPD, you should make them all 'guest'; they're
>    still Unix-real, but cannot leave their restricted area.
>

but with the '-r' option  there is already a chroot; that's why i choose
a 'real' class. As guests there would be 2 chroot.


>    All users shoul be considered insecure.  The question is their level of
>    hostility.  From what you're saying, you consider minor users
>    potentially more hostile than major users.
>

that's it; in fact major users are identified (company employee).

>  - The restricted-uid/restricted-gid clause should not be considered secure
>    unless used within a chroot'd environment.  There simply is not enough
>    history for this feature to know if there may be problems with it.
>

as i said we have a chroot'd environment ( -r option); nevertheless i do
not want users to go outside their home directories (and subdirectories
for major users)



>  - The "relative" phrase could be getting in the way.
>

i tried without this one ; no difference.

>  - If you're using wildcards in the pathname parameters you need to be VERY
>    VERY carefull.  They will match a lot more than you probably intended.
>

actually i was wondering wether i would modify extensions.c : add
FNM_PATHNAME option to fnmatch ; thus '*' would stop matching  any
'/'...

> Here's how I'd set this up:
>
> drwxr-xr-x root     root     /home/users
> d--x--x--x root     root     /home/users/bin
> d--x--x--x root     root     /home/users/dev
> d--x--x--x root     root     /home/users/etc
> drwxrwx--t maj1     maj1     /home/users/maj1
> drwxr-xr-x root     root     /home/users/maj1/users
> drwxrwx--- maj1min1 maj1     /home/users/maj1/users/maj1min1
> drwxrwx--- maj1min2 maj1     /home/users/maj1/users/maj1min2
> drwxrwx--- maj1min3 maj1     /home/users/maj1/users/maj1min3
> drwxrwx--t maj2     maj2     /home/users/maj2
> drwxr-xr-x root     root     /home/users/maj2/users
> drwxrwx--- maj2min1 maj2     /home/users/maj2/users/maj2min1
> drwxrwx--- maj2min2 maj2     /home/users/maj2/users/maj2min2
> drwxrwx--- maj2min3 maj2     /home/users/maj2/users/maj2min3
> drwxrwx--t maj3     maj3     /home/users/maj3
> drwxr-xr-x root     root     /home/users/maj3/users
> drwxrwx--- maj3min1 maj3     /home/users/maj3/users/maj3min1
> drwxrwx--- maj3min2 maj3     /home/users/maj3/users/maj3min2
> drwxrwx--- maj3min3 maj3     /home/users/maj3/users/maj3min3
>
> ### /etc/passwd
> maj1:XXXXX:10000:10000::/home/users/maj1:bin/sh
> maj1min1:X:10001:10001::/home/users/maj1/users/min1:/bin/sh
> maj1min2:X:10002:10002::/home/users/maj1/users/min2:/bin/sh
> maj1min3:X:10003:10003::/home/users/maj1/users/min3:/bin/sh
> maj2:XXXXX:20000:20000::/home/users/maj2:bin/sh
> maj2min1:X:20001:20001::/home/users/maj2/users/min1:/bin/sh
> maj2min2:X:20002:20002::/home/users/maj2/users/min2:/bin/sh
> maj2min3:X:20003:20003::/home/users/maj2/users/min3:/bin/sh
> maj3:XXXXX:30000:30000::/home/users/maj3:bin/sh
> maj3min1:X:30001:30001::/home/users/maj3/users/min1:/bin/sh
> maj3min2:X:30002:30002::/home/users/maj3/users/min2:/bin/sh
> maj3min3:X:30003:30003::/home/users/maj3/users/min3:/bin/sh
>
> ### /etc/group
> maj1::10000:maj1
> maj1min1::10001:maj1,maj1min1
> maj1min2::10002:maj1,maj1min2
> maj1min3::10003:maj1,maj1min3
> maj2::20000:maj2
> maj2min1::20001:maj2,maj2min1
> maj2min2::20002:maj2,maj2min2
> maj2min3::20003:maj2,maj3min3
> maj3::30000:maj3
> maj3min1::30003:maj3,maj1min3
> maj3min2::30002:maj3,maj3min2
> maj3min3::30003:maj3,maj3min3
>
> ### /home/users/etc/passwd
> maj1::10000:10000::/maj1:
> maj1min1::10001:10001::/maj1/users/min1:
> maj1min2::10002:10002::/maj1/users/min2:
> maj1min3::10003:10003::/maj1/users/min3:
> maj2::20000:20000::/maj2:
> maj2min1::20001:20001::/maj2/users/min1:
> maj2min2::20002:20002::/maj2/users/min2:
> maj2min3::20003:20003::/maj2/users/min3:
> maj3::30000:30000::/maj3:
> maj3min1::30001:30001::/maj3/users/min1:
> maj3min2::30002:30002::/maj3/users/min2:
> maj3min3::30003:30003::/maj3/users/min3:
>
> ### /home/users/etc/group
> maj1::10000:
> maj1min1::10001:
> maj1min2::10002:
> maj1min3::10003:
> maj2::20000:
> maj2min1::20001:
> maj2min2::20002:
> maj2min3::20003:
> maj3::30000:
> maj3min1::30001:
> maj3min2::30002:
> maj3min3::30003:
>
> ### etc/ftpaccess
>
> class user guest *
> guestuser *
> restricted-uid *
> guest-root /home/users
>
> noretrieve core
> # Everyone is restricted-uid and cannot get here, but just to be sure...
> noretrieve /home/users/bin/
> noretrieve /home/users/dev/
> noretrieve /home/users/etc/
> upload /home/users/*         /        no
> upload /home/users/*         /bin     no
> upload /home/users/*         /dev     no
> upload /home/users/*         /etc     no
> upload /home/users/*/users/* /        no
> upload /home/users/*/users/* /bin     no
> upload /home/users/*/users/* /dev     no
> upload /home/users/*/users/* /etc     no
> upload /home/users/*/users/* /*/users no
>
> # Major users
> upload /home/users/* *          yes nodirs
> upload /home/users/* /*/users   no
> upload /home/users/* /*/users/* yes * * 0460 nodirs
>
> # Minor users
> upload /home/users/*/users/* *          no
> upload /home/users/*/users/* /*/users/* yes * * 0260 nodirs


Thanks for this example and you answer.

i dind't tried yet, but there seems to be the same problem than i have
with these lines :
# Major users
upload /home/users/* *          yes nodirs

# Minor users
upload /home/users/*/users/* *          no

why a minor user wouldn't match the first line ?


IMO chrooting with the '-r' option is very interesting : passwd & shadow
will be in the chroot'd environment. Only ftpaccess will be in /etc.

From [email protected]  Thu Jul 29 11:28:53 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id LAA26788
       for <[email protected]>; Thu, 29 Jul 1999 11:28:53 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id LAA04265;
       Thu, 29 Jul 1999 11:30:01 -0500 (CDT)
Received: from peer.guj.de (peer.guj.de [193.7.250.57])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id LAA03530
       for <[email protected]>; Thu, 29 Jul 1999 11:24:08 -0500 (CDT)
Received: by ngjexc11.zd.guj.de with Internet Mail Service (5.5.2448.0)
       id <P6BP0J5K>; Thu, 29 Jul 1999 18:23:30 +0200
Message-Id: <[email protected]>
Date: Thu, 29 Jul 1999 18:23:29 +0200
Reply-To: [email protected]
Sender: [email protected]
From: gc_team28 <[email protected]>
To: WU-FTP MailingList <[email protected]>
Subject: Newbie: Problem with reload of ftpaccess
MIME-Version: 1.0
Content-Type: text/plain
X-Mailer: Internet Mail Service (5.5.2448.0)
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN

Hi,

i've got a problem with the ftpaccess file. It seems, that wu-ftp does not
automatically reload ftpaccess.
About one week ago, i added a guestgroup to ftpaccess and it worked perfectly.
Now i added a second group and wu-ftp seems not to reload the ftpaccess file.
(for example: I disabled the first guestgroup line (#) and the group had still access.)

can i reload the ftpaccess manualy?
how can i find out, where wu-ftp looks for the ftpaccess-file whitout having the
source code of wu-ftp (two week ago it used to use /usr/local/etc/ftpaccess ;-) )?
do i have to restart wu-ftp ? and how do i do this? kill -HUP Pid?

Some information:
I use wu-ftp 2.5 under solaris / sparc 2.6


From [email protected]  Thu Jul 29 11:41:46 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id LAA27079
       for <[email protected]>; Thu, 29 Jul 1999 11:41:45 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id LAA06064;
       Thu, 29 Jul 1999 11:42:53 -0500 (CDT)
Received: from peer.guj.de (peer.guj.de [193.7.250.57])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id LAA05046
       for <[email protected]>; Thu, 29 Jul 1999 11:38:44 -0500 (CDT)
Received: by ngjexc11.zd.guj.de with Internet Mail Service (5.5.2448.0)
       id <P6BP0J54>; Thu, 29 Jul 1999 18:38:12 +0200
Message-Id: <[email protected]>
Date: Thu, 29 Jul 1999 18:38:11 +0200
Reply-To: [email protected]
Sender: [email protected]
From: gc_team28 <[email protected]>
To: WU-FTP MailingList <[email protected]>
Subject: Newbie: Problem with reload of ftpaccess
MIME-Version: 1.0
Content-Type: text/plain
X-Mailer: Internet Mail Service (5.5.2448.0)
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN

Hi,

i've got a problem with my ftpaccess file. wu-ftp seems not to reload it.
about 1 week ago i added a guestgroup to ftpaccess and evrything worked
perfectly. now i added a second group and wu-ftp just don't reload
ftpaccess (for example: i disabled the first guestgroup (#) and nothing
changed..

can i reload the ftpaccess file manualy?
must i restart wu-ftp? how do i restart it (kill -HUP Pid)?
how can i find out, which ftpaccess-file wu-ftp uses, without having
the installation source-code (a week ago it was /usr/local/etc :-) )?

some information:

i use wu-ftp 2.5 with solaris 2.6

CU

Andre


From [email protected]  Thu Jul 29 11:54:31 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id LAA27310
       for <[email protected]>; Thu, 29 Jul 1999 11:54:30 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id LAA03916;
       Thu, 29 Jul 1999 11:55:38 -0500 (CDT)
Received: from xenia.mc2.renault.fr ([email protected] [193.194.133.5])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id LAA06961
       for <[email protected]>; Thu, 29 Jul 1999 11:52:28 -0500 (CDT)
Received: from univers.mc2.renault.fr by xenia.mc2.renault.fr id SAA00302; Thu, 29 Jul 1999 18:52:38 +0200 (MET DST)
Received: from kitten.pdj.renault.fr by univers.mc2.renault.fr id SAA02578; Thu, 29 Jul 1999 18:52:21 +0200 (MET DST)
Received: by kitten id SAA29196; Thu, 29 Jul 1999 18:07:35 +0200 (MET DST)
Received: by goblin id SAA24620; Thu, 29 Jul 1999 18:51:56 +0200 (MET DST)
Message-Id: <[email protected]>
Date: Thu, 29 Jul 1999 18:51:56 +0200
Reply-To: [email protected]
Sender: [email protected]
From: Charles Bruneteau <[email protected]>
To: Gregory A Lundberg <[email protected]>,
       ML wuftpd <[email protected]>
Subject: Re: Homedir matching in Upload line
References: <[email protected]> <[email protected]> <[email protected]> <[email protected]>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
X-Sender: [email protected]
X-Mailer: Mozilla 4.08 [en] (X11; I; SunOS 5.5.1 sun4u)
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN

Gregory A Lundberg wrote:
>
> On Thu, Jul 29, 1999 at 05:14:28PM +0200, Charles Bruneteau wrote:
>
> > but with the '-r' option  there is already a chroot; that's why i choose
> > a 'real' class. As guests there would be 2 chroot.
>
> I missed that.  I put it in, but I don't use it.  If I'm going to that much
> work, I do it in a shell script before starting the daemon.
>
> > >  - The "relative" phrase could be getting in the way.
> >
> > i tried without this one ; no difference.
> >
> > >  - If you're using wildcards in the pathname parameters you need to be VERY
> > >    VERY carefull.  They will match a lot more than you probably intended.
> >
> > actually i was wondering wether i would modify extensions.c : add
> > FNM_PATHNAME option to fnmatch ; thus '*' would stop matching  any
> > '/'...
>
> Blech!  Um, yeah.  And you probably want to set FNM_LEADING_DIR as well.
> And, of course, none of it will work because the fnmatch() provided with
> 2.5.0 is buggy and the fnmatch() on most systems is either not POSIX 2 or
> is POSIX 2 but didn't correct the design oversight.
>
> You probably want to get with me personally to get a CVS snapshot of the
> under-development code ...
>

oh, i was not meaning i'm a great code writer ! I'm just able to hack
part of functions... i even hadn't notice that wuftpd was using its own
version of fnmatch !!
Back in May, i added another "path_compare" function in extensions.c
(2.4.2vr17), this time with the FNM_PATHNAME flag. If i remember well it
seemed to work. However i had to stopped my tests there because of
higher priorities...

i 'm going to detail what i was hoping to achieve, in case you have
ideas about it :

- overall purpose : exchange of files between employees and external
people (on the internet for example)

- any external guy depends on an employee (the accounts are created when
an employee asks for it). Accounts are temporary (ttl is given by the
employee).

- no exchange between 2 employees, or between 2 external guy, that is
only in->out or out->in (with relation to the company). Furthermore
external people (who i was calling minor users) shouldn't be allowed to
read what they upload.

- authentication with user/password, and if possible one time password
for permanent users. (i was the one who asked you about PAM on solaris,
if you remember...)

- no anonymous connection

- employees should be able to connect from outside the company, but may
not be allowed to upload file. This point is not fixed yet.

- etc/ftpaccess should not be modified when adding any user. And of
course a chroot'd environment.

That's it !

Regard

Charles Bruneteau


PS : during my tests i had another problem : using restricting-gid
clause for minor users, and a tree such as :
       /majoruser1/minoruser1/incoming
       /majoruser1/minoruser1/outgoing
minoruser1 was able to cd to incoming (or outgoing), but ls in this
directory reported an error :
       550 Permission denied on server.  You are restricted to your account
what am i mssing ?

From [email protected]  Thu Jul 29 13:12:19 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id NAA28734
       for <[email protected]>; Thu, 29 Jul 1999 13:12:18 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id NAA14457;
       Thu, 29 Jul 1999 13:13:23 -0500 (CDT)
Received: from mail.vr.net ([email protected] [205.133.13.8])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id NAA02449
       for <[email protected]>; Thu, 29 Jul 1999 13:09:36 -0500 (CDT)
Received: (from lundberg@localhost)
       by mail.vr.net (8.9.3/8.9.3) id OAA20154;
       Thu, 29 Jul 1999 14:09:19 -0400
Message-Id: <[email protected]>
Date: Thu, 29 Jul 1999 14:09:19 -0400
Reply-To: Gregory A Lundberg <[email protected]>
Sender: [email protected]
From: Gregory A Lundberg <[email protected]>
To: Charles Bruneteau <[email protected]>
Cc: ML wuftpd <[email protected]>
Subject: Re: Homedir matching in Upload line
In-Reply-To: <[email protected]>; from Charles Bruneteau on Thu, Jul 29, 1999 at 06:51:56PM +0200
References: <[email protected]> <[email protected]> <[email protected]> <[email protected]> <[email protected]>
Mime-Version: 1.0
Content-Type: multipart/signed; boundary=CdrF4e02JqNVZeln; micalg=pgp-md5;
       protocol="application/pgp-signature"
X-Mailer: Mutt 0.95.6i
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN


--CdrF4e02JqNVZeln
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable

On Thu, Jul 29, 1999 at 06:51:56PM +0200, Charles Bruneteau wrote:

> Gregory A Lundberg wrote:

> > > actually i was wondering wether i would modify extensions.c : add
> > > FNM_PATHNAME option to fnmatch ; thus '*' would stop matching  any
> > > '/'...
> >=20
> > Blech!  Um, yeah.  And you probably want to set FNM_LEADING_DIR as
> > well.  And, of course, none of it will work because the fnmatch()
> > provided with 2.5.0 is buggy and the fnmatch() on most systems is
> > either not POSIX 2 or is POSIX 2 but didn't correct the design
> > oversight.
> >=20
> > You probably want to get with me personally to get a CVS snapshot of
> > the under-development code ...
>=20
> oh, i was not meaning i'm a great code writer ! I'm just able to hack
> part of functions... i even hadn't notice that wuftpd was using its own
> version of fnmatch !!   Back in May, i added another "path_compare"
> function in extensions.c (2.4.2vr17), this time with the FNM_PATHNAME
> flag. If i remember well it seemed to work. However i had to stopped my
> tests there because of higher priorities...=20

What I meant was .. "Yes, you probably should add that flag.  And you'll
probably want the corrected function since your OS-provided one is probably
broken like the BSD version which came with the daemon."  So, I offer the
CVS snapshot so you can use the corrected/debugged fnmatch() function.

> i 'm going to detail what i was hoping to achieve, in case you have ideas
> about it :
>=20
> - overall purpose : exchange of files between employees and external
> people (on the internet for example)
>=20
> - any external guy depends on an employee (the accounts are created when
> an employee asks for it). Accounts are temporary (ttl is given by the
> employee).=20

I've just had someone else ask me to look at his web-based management
system for this.  was cool, but I don't think it's somehting the daemon
should include .. if he doesn't pipe up, I'll send you his email address
privately.

> - no exchange between 2 employees, or between 2 external guy, that is
> only in->out or out->in (with relation to the company). Furthermore
> external people (who i was calling minor users) shouldn't be allowed to
> read what they upload.=20

restricted-uid will keep employees apart.  it'll probably also solve your
problems everywhere.  take a look at my example i sent earlier, it should
do what you want in this respect.

> - authentication with user/password, and if possible one time password
> for permanent users. (i was the one who asked you about PAM on solaris,
> if you remember...)

which should all be working for you.  might need to do a little hacking to
get PAM going on soalris .. I onlt could do it for Linux.  Or, use OPIE.

> - no anonymous connection

config it, test it, disable it with 'defaultserer private' then when
management changes their mind, remove the one line and you're a god.

> - employees should be able to connect from outside the company, but may
> not be allowed to upload file. This point is not fixed yet.

use classes and class=3D on uploads

> - etc/ftpaccess should not be modified when adding any user. And of
> course a chroot'd environment.

chroot, it won't be there at all

> PS : during my tests i had another problem : using restricting-gid clause
> for minor users, and a tree such as :
>       /majoruser1/minoruser1/incoming
>       /majoruser1/minoruser1/outgoing
> minoruser1 was able to cd to incoming (or outgoing), but ls in this
> directory reported an error :
>       550 Permission denied on server.  You are restricted to your account
> what am i mssing ?

Probably a mismatch between the chroot-local etc/passwd and the fiesystem
visible to the daemon after the chroot() occurs.  The homes in the local
etc/passwd are what are important for this feature.

The user shouldn't have been able to cd to begin with, so I'd guess you
should start using guest-root instead of the /./ hack so the local
etc/passwd is also used for the initial cwd setting upon guest login.

--=20

Gregory A Lundberg              WU-FTPD Development Group
1441 Elmdale Drive              [email protected]
Kettering, OH 45409-1615 USA    1-800-809-2195

--CdrF4e02JqNVZeln
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5

iQB1AwUBN6CKtQ2nXFkJc83RAQHHNAL/ds6fxpwb6I4++AN92kGR4+/2GqE3WPgG
gexHfSWcI2cTFHXeZwn7nG167ZWuD1EMlkrvgw+gqndVldsdV3bsVUIhLFWwKkTh
14yFWT+gnnHegyvcIDDICEJJEE36nlRu
=QYij
-----END PGP SIGNATURE-----

--CdrF4e02JqNVZeln--

From [email protected]  Thu Jul 29 13:25:01 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id NAA28971
       for <[email protected]>; Thu, 29 Jul 1999 13:25:00 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id NAA12026;
       Thu, 29 Jul 1999 13:26:07 -0500 (CDT)
Received: from mail.vr.net ([email protected] [205.133.13.8])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id NAA09664
       for <[email protected]>; Thu, 29 Jul 1999 13:21:55 -0500 (CDT)
Received: (from lundberg@localhost)
       by mail.vr.net (8.9.3/8.9.3) id OAA20276;
       Thu, 29 Jul 1999 14:21:44 -0400
Message-Id: <[email protected]>
Date: Thu, 29 Jul 1999 14:21:43 -0400
Reply-To: Gregory A Lundberg <[email protected]>
Sender: [email protected]
From: Gregory A Lundberg <[email protected]>
To: gc_team28 <[email protected]>
Cc: WU-FTP MailingList <[email protected]>
Subject: Re: Newbie: Problem with reload of ftpaccess
In-Reply-To: <[email protected]>; from gc_team28 on Thu, Jul 29, 1999 at 06:38:11PM +0200
References: <[email protected]>
Mime-Version: 1.0
Content-Type: multipart/signed; boundary="adJ1OR3c6QgCpb/j"; micalg=pgp-md5;
       protocol="application/pgp-signature"
X-Mailer: Mutt 0.95.6i
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN


--adJ1OR3c6QgCpb/j
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable

On Thu, Jul 29, 1999 at 06:38:11PM +0200, gc_team28 wrote:

> i've got a problem with my ftpaccess file. wu-ftp seems not to reload it.
> about 1 week ago i added a guestgroup to ftpaccess and evrything worked
> perfectly. now i added a second group and wu-ftp just don't reload
> ftpaccess (for example: i disabled the first guestgroup (#) and nothing
> changed..
>=20
> can i reload the ftpaccess file manualy?  must i restart wu-ftp? how do i
> restart it (kill -HUP Pid)?  how can i find out, which ftpaccess-file
> wu-ftp uses, without having the installation source-code (a week ago it
> was /usr/local/etc :-) )?

Kill the daemon and restart it.  It won't reload the ftpaccess file at all
in 2.5.0.  I'l working on a rewrite of the ftpaccess file handling which
will automatically reload the ftpaccess file when it changes, but it won't
be ready for the next release (2.6.0).

There are two ways to determine the ftpaccess filename without reading the
(unreadable) source.

- run ckconfig.  it will tell you

- strings the binary.  grep for ftpaccess.  this is what I do, it's always
  correct

$ strings ftpd | grep ftpaccess
FTP server started without ftpaccess file
/etc/ftpaccess
Too many args (>%d) in ftpaccess: %s %s %s %s %s ...
ERROR ftpaccess port entry<%s> too large
ERROR ftpaccess port entry<%s> invalid
ERROR ftpaccess passive entry <%s> to large
ERROR ftpaccess vector entry<%s> to large
ERROR ftpaccess vector entry<%s> invalid

  There it is, on the second line.

--=20

Gregory A Lundberg              WU-FTPD Development Group
1441 Elmdale Drive              [email protected]
Kettering, OH 45409-1615 USA    1-800-809-2195

--adJ1OR3c6QgCpb/j
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5

iQB1AwUBN6CNow2nXFkJc83RAQGqGAMAmbDDmhlKZQZhcZ7V2rXwFXMJRMaytssk
wMtDquNwEcW7NE7iC1xdl0HQy4NTL4Yrvs51ROoFakKsfXI+y9mW8ma3jdrXKGK9
cGWGVQL/UgNxS4mdGW6bQgIr2r6IbF0m
=rZ0I
-----END PGP SIGNATURE-----

--adJ1OR3c6QgCpb/j--

From [email protected]  Fri Jul 30 03:23:58 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id DAA11542
       for <[email protected]>; Fri, 30 Jul 1999 03:23:57 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id DAA12287;
       Fri, 30 Jul 1999 03:24:44 -0500 (CDT)
Received: from xenia.mc2.renault.fr ([email protected] [193.194.133.5])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id DAA25356
       for <[email protected]>; Fri, 30 Jul 1999 03:16:19 -0500 (CDT)
Received: from univers.mc2.renault.fr by xenia.mc2.renault.fr id KAA13465; Fri, 30 Jul 1999 10:16:30 +0200 (MET DST)
Received: from kitten.pdj.renault.fr by univers.mc2.renault.fr id KAA13823; Fri, 30 Jul 1999 10:16:03 +0200 (MET DST)
Received: by kitten id JAA22435; Fri, 30 Jul 1999 09:31:10 +0200 (MET DST)
Received: by goblin id KAA27535; Fri, 30 Jul 1999 10:15:32 +0200 (MET DST)
Message-Id: <[email protected]>
Date: Fri, 30 Jul 1999 10:15:32 +0200
Reply-To: [email protected]
Sender: [email protected]
From: Charles Bruneteau <[email protected]>
To: Gregory A Lundberg <[email protected]>,
       ML wuftpd <[email protected]>
Subject: Re: Homedir matching in Upload line
References: <[email protected]> <[email protected]> <[email protected]> <[email protected]> <[email protected]> <[email protected]>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
X-Sender: [email protected]
X-Mailer: Mozilla 4.08 [en] (X11; I; SunOS 5.5.1 sun4u)
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN

Gregory A Lundberg wrote:

>
> What I meant was .. "Yes, you probably should add that flag.  And you'll
> probably want the corrected function since your OS-provided one is probably
> broken like the BSD version which came with the daemon."  So, I offer the
> CVS snapshot so you can use the corrected/debugged fnmatch() function.
>

Great! So please send me it to my email (there is a 2Mb limit, but i
guess that it will not be that big).

> > i 'm going to detail what i was hoping to achieve, in case you have ideas
> > about it :
> >
> > - overall purpose : exchange of files between employees and external
> > people (on the internet for example)
> >
> > - any external guy depends on an employee (the accounts are created when
> > an employee asks for it). Accounts are temporary (ttl is given by the
> > employee).
>
> I've just had someone else ask me to look at his web-based management
> system for this.  was cool, but I don't think it's somehting the daemon
> should include .. if he doesn't pipe up, I'll send you his email address
> privately.
>

that's funny; i wrote one too... and i'm still updating it : i forgot
about apache mod_perl when i wrote the first version, so it's a cgi.

> > - no exchange between 2 employees, or between 2 external guy, that is
> > only in->out or out->in (with relation to the company). Furthermore
> > external people (who i was calling minor users) shouldn't be allowed to
> > read what they upload.
>
> restricted-uid will keep employees apart.  it'll probably also solve your
> problems everywhere.  take a look at my example i sent earlier, it should
> do what you want in this respect.
>

But what did you mean with :
  " - The restricted-uid/restricted-gid clause should not be considered
secure
  unless used within a chroot'd environment.  There simply is not
enough
  history for this feature to know if there may be problems with it."

can i be certain that a minor user won't be allowed to browse any other
account, and that a major user won't be able to browse any other major
homedir.

> > - authentication with user/password, and if possible one time password
> > for permanent users. (i was the one who asked you about PAM on solaris,
> > if you remember...)
>
> which should all be working for you.  might need to do a little hacking to
> get PAM going on soalris .. I onlt could do it for Linux.  Or, use OPIE.
>

it was working with 2.4.2vr17, but not with the chroot'd environment. I
hadn't time to analyse this a lot.
i will try again.

> > - no anonymous connection
>
> config it, test it, disable it with 'defaultserer private' then when
> management changes their mind, remove the one line and you're a god.
>

do you mean : set the ftp account in passwd, allow anonymous in a class,
etc. then just add 'default server private' ?


>
> > PS : during my tests i had another problem : using restricting-gid clause
> > for minor users, and a tree such as :
> >       /majoruser1/minoruser1/incoming
> >       /majoruser1/minoruser1/outgoing
> > minoruser1 was able to cd to incoming (or outgoing), but ls in this
> > directory reported an error :
> >       550 Permission denied on server.  You are restricted to your account
> > what am i mssing ?
>
> Probably a mismatch between the chroot-local etc/passwd and the fiesystem
> visible to the daemon after the chroot() occurs.  The homes in the local
> etc/passwd are what are important for this feature.
>

here are 2 lines of my chroot-local etc/passwd :
----
minor1:x:15001:502:ftp out:/major1/minor1:/bin/false
major1:x:5001:501:ftp in:/major1:/bin/false
----

> The user shouldn't have been able to cd to begin with, so I'd guess you
> should start using guest-root instead of the /./ hack so the local
> etc/passwd is also used for the initial cwd setting upon guest login.

has you see above i'm not using '/./' in the homedir (users are 'real').
I'm surprised that restricted user should not be allowed to go in
subdirectories of their homedirectory. Did i understand well what you
said ?
That would be a problem for me because i want major user to cd to their
minor users' homedir... (exchanges occurs in the minor user 's homedir).

From [email protected]  Fri Jul 30 03:34:00 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id DAA11638
       for <[email protected]>; Fri, 30 Jul 1999 03:33:59 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id DAA30500;
       Fri, 30 Jul 1999 03:35:07 -0500 (CDT)
Received: from xenia.mc2.renault.fr ([email protected] [193.194.133.5])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id DAA26534
       for <[email protected]>; Fri, 30 Jul 1999 03:23:11 -0500 (CDT)
Received: from univers.mc2.renault.fr by xenia.mc2.renault.fr id KAA14798; Fri, 30 Jul 1999 10:23:25 +0200 (MET DST)
Received: from kitten.pdj.renault.fr by univers.mc2.renault.fr id KAA15652; Fri, 30 Jul 1999 10:23:04 +0200 (MET DST)
Received: by kitten id JAA22467; Fri, 30 Jul 1999 09:38:16 +0200 (MET DST)
Received: by goblin id KAA27555; Fri, 30 Jul 1999 10:22:38 +0200 (MET DST)
Message-Id: <[email protected]>
Date: Fri, 30 Jul 1999 10:22:38 +0200
Reply-To: [email protected]
Sender: [email protected]
From: Charles Bruneteau <[email protected]>
To: Gregory A Lundberg <[email protected]>,
       ML wuftpd <[email protected]>
Subject: Re: Homedir matching in Upload line
References: <[email protected]> <[email protected]> <[email protected]> <[email protected]> <[email protected]> <[email protected]> <[email protected]>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
X-Sender: [email protected]
X-Mailer: Mozilla 4.08 [en] (X11; I; SunOS 5.5.1 sun4u)
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN

>
> > The user shouldn't have been able to cd to begin with, so I'd guess you
> > should start using guest-root instead of the /./ hack so the local
> > etc/passwd is also used for the initial cwd setting upon guest login.
>
> has you see above i'm not using '/./' in the homedir (users are 'real').
> I'm surprised that restricted user should not be allowed to go in
> subdirectories of their homedirectory. Did i understand well what you
> said ?
> That would be a problem for me because i want major user to cd to their
> minor users' homedir... (exchanges occurs in the minor user 's homedir).


i've found my problem : /major1 was not readable by minor1 ! i hope
restricted-uid/gid will do its job !


regards

charles bruneteau

From [email protected]  Fri Jul 30 08:19:29 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id IAA15476
       for <[email protected]>; Fri, 30 Jul 1999 08:19:29 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id IAA12891;
       Fri, 30 Jul 1999 08:20:36 -0500 (CDT)
Received: from mail.vr.net ([email protected] [205.133.13.8])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id IAA10861
       for <[email protected]>; Fri, 30 Jul 1999 08:18:46 -0500 (CDT)
Received: (from lundberg@localhost)
       by mail.vr.net (8.9.3/8.9.3) id JAA30215;
       Fri, 30 Jul 1999 09:18:25 -0400
Message-Id: <[email protected]>
Date: Fri, 30 Jul 1999 09:18:25 -0400
Reply-To: Gregory A Lundberg <[email protected]>
Sender: [email protected]
From: Gregory A Lundberg <[email protected]>
To: Charles Bruneteau <[email protected]>
Cc: ML wuftpd <[email protected]>
Subject: Re: Homedir matching in Upload line
In-Reply-To: <[email protected]>; from Charles Bruneteau on Fri, Jul 30, 1999 at 10:15:32AM +0200
References: <[email protected]> <[email protected]> <[email protected]> <[email protected]> <[email protected]> <[email protected]> <[email protected]>
Mime-Version: 1.0
Content-Type: multipart/signed; boundary=r5Pyd7+fXNt84Ff3; micalg=pgp-md5;
       protocol="application/pgp-signature"
X-Mailer: Mutt 0.95.6i
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN


--r5Pyd7+fXNt84Ff3
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable

On Fri, Jul 30, 1999 at 10:15:32AM +0200, Charles Bruneteau wrote:

> But what did you mean with :
>    " - The restricted-uid/restricted-gid clause should not be considered
>    secure unless used within a chroot'd environment.  There simply is not
>    enough history for this feature to know if there may be problems with
>    it."
>=20
> can i be certain that a minor user won't be allowed to browse any other
> account, and that a major user won't be able to browse any other major
> homedir.

We don't _think_ a user would be able to browse to other's directories.
But the feature is so new, nobody's seriously attacked it yet.

> > > - authentication with user/password, and if possible one time password
> > > for permanent users. (i was the one who asked you about PAM on solari=
s,
> > > if you remember...)
> >=20
> > which should all be working for you.  might need to do a little hacking=
to
> > get PAM going on soalris .. I onlt could do it for Linux.  Or, use OPIE.
> >=20
>=20
> it was working with 2.4.2vr17, but not with the chroot'd environment. I
> hadn't time to analyse this a lot.  i will try again.

You need to be sure to grab all the PAM parts, some of which are
non-obvious.  Took me about three days to figure them all out for Linux,
and that was by trial-and-error.

> > > - no anonymous connection
> >=20
> > config it, test it, disable it with 'defaultserer private' then when
> > management changes their mind, remove the one line and you're a god.
> >=20
>=20
> do you mean : set the ftp account in passwd, allow anonymous in a class,
> etc. then just add 'default server private' ?

yep.  well, 'defaultserver' is one word here.  the idea is to ensure
anonymous ftp is safely done now, while you're thinking about it, then just
disable it until management changes their mind (sic).

> > > PS : during my tests i had another problem : using restricting-gid cl=
ause
> > > for minor users, and a tree such as :
> > >       /majoruser1/minoruser1/incoming
> > >       /majoruser1/minoruser1/outgoing
> > > minoruser1 was able to cd to incoming (or outgoing), but ls in this
> > > directory reported an error :
> > >       550 Permission denied on server.  You are restricted to your ac=
count
> > > what am i mssing ?
> >=20
> > Probably a mismatch between the chroot-local etc/passwd and the fiesyst=
em
> > visible to the daemon after the chroot() occurs.  The homes in the local
> > etc/passwd are what are important for this feature.
> >=20
>=20
> here are 2 lines of my chroot-local etc/passwd :
> ----
> minor1:x:15001:502:ftp out:/major1/minor1:/bin/false
> major1:x:5001:501:ftp in:/major1:/bin/false
> ----
>=20
> > The user shouldn't have been able to cd to begin with, so I'd guess you
> > should start using guest-root instead of the /./ hack so the local
> > etc/passwd is also used for the initial cwd setting upon guest login.
>=20
> has you see above i'm not using '/./' in the homedir (users are 'real').=
=20
> I'm surprised that restricted user should not be allowed to go in
> subdirectories of their homedirectory. Did i understand well what you
> said ?
> That would be a problem for me because i want major user to cd to their
> minor users' homedir... (exchanges occurs in the minor user 's homedir).

You using symlinks?

Restricted-uid will allow access down the tree inside you home, but it
won't let you jump out, even with a symlink.

--=20

Gregory A Lundberg              WU-FTPD Development Group
1441 Elmdale Drive              [email protected]
Kettering, OH 45409-1615 USA    1-800-809-2195

--r5Pyd7+fXNt84Ff3
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5

iQB1AwUBN6GYCw2nXFkJc83RAQF8nAMAjnZdv3ZRh4cKqxAe6zSRu+3RBFt/Kue0
5sHSOqpKaQhtw+tFJEeh4gsU02nKMtidP+SwY89e3j5H/an+zkN4z5P0LOrOSMuV
XxqAkkq2RcF0jxs8JMXjdJTMZc6mOb7C
=DKSh
-----END PGP SIGNATURE-----

--r5Pyd7+fXNt84Ff3--

From [email protected]  Fri Jul 30 13:02:37 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id NAA20376
       for <[email protected]>; Fri, 30 Jul 1999 13:02:37 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id MAA30428;
       Fri, 30 Jul 1999 12:59:24 -0500 (CDT)
Received: from gatekeeper.qms.com (gatekeeper.qms.com [161.33.3.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id MAA04702
       for <[email protected]>; Fri, 30 Jul 1999 12:58:08 -0500 (CDT)
Received: (qmail 4653 invoked from network); 30 Jul 1999 17:57:37 -0000
Received: from sun470.qms.com (HELO sun470.rd.qms.com) (161.33.128.1)
 by 161.33.254.2 with SMTP; 30 Jul 1999 17:57:37 -0000
Received: from rd.qms.com (internet-mail) by sun470.rd.qms.com (4.1/SMI-4.1)
       id AA20310; Fri, 30 Jul 99 12:57:35 CDT
Received: from ccMail by rd.qms.com (ccMail Link to SMTP R8.31.00.5)
   id AA933357454; Fri, 30 Jul 1999 12:57:37 -0500
Message-Id: <[email protected]>
Date: Fri, 30 Jul 1999 12:55:37 -0500
Reply-To: [email protected]
Sender: [email protected]
From: [email protected]
To: <[email protected]>
Subject: Standard ls problem???
Mime-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Content-Description: "cc:Mail Note Part"
X-Mailer: ccMail Link to SMTP R8.31.00.5
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN

    Hello All,

         This is looking like the standard 'ls' issue but I can't seem to
    find the answer.  The basic problem is that ls doesn't work from a
    browser.  Sounded like a misconfiguration so I looked through the
    archives, FAQ and the in.ftpd man pages.  Fixed a couple of items and
    got the same result (restarted the browser every time).

         OS is a stripped down Solaris 7.  By stripped down I mean only
    the core OS components are installed and a minimal number of daemons
    running.

         The error message I get from 'chroot ~ftp /bin/ls' is:

    ld.so.1: internal: malloc failed Killed

         Did the truss chroot command from the FAQ.  'ls' is complaining
    on:

    open("/dev/zero", O_RDONLY)                     Err#6 ENXIO

         It tries the open twice and then reports the error.  Did a man on
    open.  From the 'open' manpage:

    ENXIO     The O_NONBLOCK flag is set, the named  file  is  a
                   FIFO, the O_WRONLY flag is set, and no process has
                   the file open for reading; *** or the named file is a
                   character  special  or  block special file and the
                   device associated with this special file does  not
                   exist. ***     (Asterisks mine).

         OK - we're pointing at /dev/zero.  'ls -lL' output for /dev/zero
    and ~ftp/dev/zero:

    crw-rw-rw-   1 root     sys       13, 12 Jul 22 14:26 /dev/zero
    crw-rw-rw-   1 root     sys       13, 12 Jul 29 14:05
                                          /local/users/ftp/dev/zero

         The permissions on the directories don't seem to be the problem.
    I usually set my non-public directories to 111 but opened them up to
    555 and still got the same errors.  Permissions on ~ftp are 555.

         My ~ftp/usr/lib contains the following libraries:

    -r-xr-xr-x   1 root     other      24576 Jul 29 13:41 ld.so
    -r-xr-xr-x   1 root     other     165316 Jul 29 13:20 ld.so.1
    -r-xr-xr-x   1 root     other    1118620 Jun 23 10:44 libc.so.1
    -r-xr-xr-x   1 root     other       4528 Jun 23 10:44 libdl.so.1
    -r-xr-xr-x   1 root     other      19876 Jul 29 13:19 libmp.so
    -r-xr-xr-x   1 root     other       7104 Jul 29 13:19 libmp.so.1
    -r-xr-xr-x   1 root     other      19876 Jul 29 13:19 libmp.so.2
    -r-xr-xr-x   1 root     other     813824 Jul 29 13:19 libnsl.so.1
    -r-xr-xr-x   1 root     other      56988 Jul 29 13:20 libsocket.so.1
    -r-xr-xr-x   1 root     other      17540 Jul 29 13:19 nss_compat.so.1
    -r-xr-xr-x   1 root     other      11476 Jul 29 13:19 nss_dns.so.1
    -r-xr-xr-x   1 root     other      27884 Jul 29 13:19 nss_files.so.1
    -r-xr-xr-x   1 root     other      31260 Jul 29 13:19 nss_nis.so.1
    -r-xr-xr-x   1 root     other      37012 Jul 29 13:19 nss_nisplus.so.1
    dr-xr-xr-x   2 root     other        512 Jul 29 13:10 security
    -r-xr-xr-x   1 root     other      11048 Jul 29 13:19 straddr.so
    -r-xr-xr-x   1 root     other      11048 Jul 29 13:19 straddr.so.2

         I know I'm probably missing something simple but at the moment I
    evidently can't see the forest for the trees.  Any ideas are
    appreciated.

    John Smith
    Sys Admin
    QMS, Inc.



From [email protected]  Fri Jul 30 13:34:06 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id NAA20817
       for <[email protected]>; Fri, 30 Jul 1999 13:34:05 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id NAA09956;
       Fri, 30 Jul 1999 13:32:06 -0500 (CDT)
Received: from bsod.CS.Arizona.EDU ([email protected] [192.12.69.41])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id NAA08280
       for <[email protected]>; Fri, 30 Jul 1999 13:27:43 -0500 (CDT)
Received: from localhost (localhost [127.0.0.1])
       by bsod.CS.Arizona.EDU (Postfix) with ESMTP
       id 8E9264F83C; Fri, 30 Jul 1999 11:27:41 -0700 (MST)
Message-Id: <[email protected]>
Date: Fri, 30 Jul 1999 11:27:41 -0700 (MST)
Reply-To: [email protected]
Sender: [email protected]
From: Jim Davis <[email protected]>
To: [email protected]
Cc: [email protected]
Subject: Re: Standard ls problem???
In-Reply-To: <[email protected]>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN

Try running ldd on your ftp tree's /bin/ls.  On my 2.5.1 system I show
/usr/lib/libw.so and /usr/lib/libintl.so too, which aren't on the list you
posted.  Of course that might not be the same stuff you'll need on Solaris
7, but I'd check anyway.


From [email protected]  Fri Jul 30 14:03:26 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id OAA21391
       for <[email protected]>; Fri, 30 Jul 1999 14:03:25 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id OAA27084;
       Fri, 30 Jul 1999 14:03:32 -0500 (CDT)
Received: from gatekeeper.qms.com (gatekeeper.qms.com [161.33.3.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id NAA12005
       for <[email protected]>; Fri, 30 Jul 1999 13:58:17 -0500 (CDT)
Received: (qmail 5380 invoked from network); 30 Jul 1999 18:57:46 -0000
Received: from sun470.qms.com (HELO sun470.rd.qms.com) (161.33.128.1)
 by 161.33.254.2 with SMTP; 30 Jul 1999 18:57:46 -0000
Received: from rd.qms.com (internet-mail) by sun470.rd.qms.com (4.1/SMI-4.1)
       id AA21162; Fri, 30 Jul 99 13:57:44 CDT
Received: from ccMail by rd.qms.com (ccMail Link to SMTP R8.31.00.5)
   id AA933361062; Fri, 30 Jul 1999 13:57:47 -0500
Message-Id: <[email protected]>
Date: Fri, 30 Jul 1999 13:57:39 -0500
Reply-To: [email protected]
Sender: [email protected]
From: [email protected]
To: <[email protected]>
Cc: <[email protected]>
Subject: Re[2]: Standard ls problem???
Mime-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Content-Description: "cc:Mail Note Part"
X-Mailer: ccMail Link to SMTP R8.31.00.5
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN

         As Jim pointed out I did leave out (at least) one piece of info.
    ldd on ~ftp/bin/ls shows it needs libc.so.1 and libdl.so.1.  For grins
    I copied the files mentioned below to ~ftp/usr/lib and got the same
    results as previously noted.

    jcs


______________________________ Reply Separator _________________________________
Subject: Re: Standard ls problem???
Author:  Jim Davis <[email protected]> at Internet-Mail
Date:    7/30/99 11:27 AM


Try running ldd on your ftp tree's /bin/ls.  On my 2.5.1 system I show
/usr/lib/libw.so and /usr/lib/libintl.so too, which aren't on the list you
posted.  Of course that might not be the same stuff you'll need on Solaris
7, but I'd check anyway.




From [email protected]  Fri Jul 30 14:49:56 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id OAA22229
       for <[email protected]>; Fri, 30 Jul 1999 14:49:56 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id OAA15801;
       Fri, 30 Jul 1999 14:50:04 -0500 (CDT)
Received: from bsod.CS.Arizona.EDU ([email protected] [192.12.69.41])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id OAA31360
       for <[email protected]>; Fri, 30 Jul 1999 14:47:49 -0500 (CDT)
Received: from localhost (localhost [127.0.0.1])
       by bsod.CS.Arizona.EDU (Postfix) with ESMTP
       id E58A64F83C; Fri, 30 Jul 1999 12:47:47 -0700 (MST)
Message-Id: <[email protected]>
Date: Fri, 30 Jul 1999 12:47:47 -0700 (MST)
Reply-To: [email protected]
Sender: [email protected]
From: Jim Davis <[email protected]>
To: [email protected]
Cc: [email protected]
Subject: Re: Re[2]: Standard ls problem???
In-Reply-To: <[email protected]>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN

Well, ENXIO is a good old-fashioned "no such device" error, so if you've
cleared up the shared library stuff the likely problem is the location of
/dev/zero in your chroot'ed ftp tree.

One other possibility is mounting the filesystem containing your ftp
/dev/zero with the 'nosuid' option.  That somewhat-unintuitively prevents
device files from working.


From [email protected]  Fri Jul 30 15:22:39 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id PAA22826
       for <[email protected]>; Fri, 30 Jul 1999 15:22:38 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id PAA07813;
       Fri, 30 Jul 1999 15:21:36 -0500 (CDT)
Received: from jester.ti.com (jester.ti.com [192.94.94.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with ESMTP id PAA21424
       for <[email protected]>; Fri, 30 Jul 1999 15:17:14 -0500 (CDT)
Received: from spanky.dal.asp.ti.com ([172.24.154.20]) by jester.ti.com (8.9.3) with ESMTP id PAA02004; Fri, 30 Jul 1999 15:16:43 -0500 (CDT)
Received: from pavis.asic.sc.ti.com (pavis.asic.sc.ti.com [128.247.100.46])
       by spanky.dal.asp.ti.com (8.8.8+Sun/8.8.8/FL-ASP-1.13) with ESMTP id PAA00093;
       Fri, 30 Jul 1999 15:16:39 -0500 (CDT)
Received: (from bobl@localhost) by pavis.asic.sc.ti.com (8.8.6 (PHNE_17135)/8.7.1) id PAA19986; Fri, 30 Jul 1999 15:16:38 -0500 (CDT)
Message-Id: <[email protected]>
Date: Fri, 30 Jul 1999 15:16:38 CDT
Reply-To: [email protected] (Bob Luckin)
Sender: [email protected]
From: Bob Luckin <[email protected]>
To: [email protected]
Cc: [email protected], [email protected]
Subject: Re: Re[2]: Standard ls problem???
In-Reply-To: <[email protected]>; from "Jim Davis" at Jul 30, 99 12:47 (noon)
X-MIMI-Options: HEADERS TI2
X-Mailer: Elm [revision: 212.4]
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN

> Well, ENXIO is a good old-fashioned "no such device" error, so if you've
> cleared up the shared library stuff the likely problem is the location of
> /dev/zero in your chroot'ed ftp tree.
>
> One other possibility is mounting the filesystem containing your ftp
> /dev/zero with the 'nosuid' option.  That somewhat-unintuitively prevents
> device files from working.

Also, in your original email you listed /dev/zero, but not ~ftp/dev/zero.
Check that the copy under the FTP root is set up identically to /dev/zero
(same major/minor numbers, world writeable, etc...)

Good luck !

Cheers, Bob
--
Bob Luckin      [email protected]      "Whatever"

From [email protected]  Fri Jul 30 16:07:47 1999
Received: from wugate.wustl.edu (wugate.wustl.edu [128.252.120.1])
       by landfield.com (8.9.0/8.9.0) with ESMTP id QAA23688
       for <[email protected]>; Fri, 30 Jul 1999 16:07:46 -0500 (CDT)
Received: from host (wugate.wustl.edu [128.252.120.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id QAA22002;
       Fri, 30 Jul 1999 16:07:53 -0500 (CDT)
Received: from gatekeeper.qms.com (gatekeeper.qms.com [161.33.3.1])
       by wugate.wustl.edu (8.8.8/8.8.5) with SMTP id QAA26882
       for <[email protected]>; Fri, 30 Jul 1999 16:01:58 -0500 (CDT)
Received: (qmail 7646 invoked from network); 30 Jul 1999 21:01:27 -0000
Received: from sun470.qms.com (HELO sun470.rd.qms.com) (161.33.128.1)
 by 161.33.254.2 with SMTP; 30 Jul 1999 21:01:27 -0000
Received: from rd.qms.com (internet-mail) by sun470.rd.qms.com (4.1/SMI-4.1)
       id AA23230; Fri, 30 Jul 99 16:01:24 CDT
Received: from ccMail by rd.qms.com (ccMail Link to SMTP R8.31.00.5)
   id AA933368483; Fri, 30 Jul 1999 16:01:27 -0500
Message-Id: <[email protected]>
Date: Fri, 30 Jul 1999 16:01:14 -0500
Reply-To: [email protected]
Sender: [email protected]
From: [email protected]
To: <[email protected]>
Cc: <[email protected]>
Subject: Re[4]: Standard ls problem???  - solved
Mime-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Content-Description: "cc:Mail Note Part"
X-Mailer: ccMail Link to SMTP R8.31.00.5
X-Listprocessor-Version: 8.0 -- ListProcessor(tm) by CREN

    All,

         Thanks for the input.  Looks like the nosuid option was the
    culprit.  Remounted the file system allowing suid files didn't work.
    Rebooted (again for grins:) with the nosuid option removed from
    /etc/vfstab and it is working fine.

         Jim - thanks for the answer.

    jcs


______________________________ Reply Separator _________________________________
Subject: Re: Re[2]: Standard ls problem???
Author:  Jim Davis <[email protected]> at Internet-Mail
Date:    7/30/99 12:47 PM


    > One other possibility is mounting the filesystem containing your ftp
    > /dev/zero with the 'nosuid' option.  That somewhat-unintuitively
    > prevents device files from working.