COMMAND
wuftpd
SYSTEMS AFFECTED
RedHat 6.1
PROBLEM
m4rcyS found following. Everything happens on vanilla RH 6.1 box.
$ man ftpaccess
guestserver [<hostname>]
Controls which hosts may be used for anonymous or
guest access. If used without <hostname>, denies all
guest or anonymous access to this site. More than
one <hostname> may be specified. Guest and anonymous
access will only be allowed on the named machines.
If access is denied, the user will be ased to use the
first <hostname> listed.
This one looks especially interesting: "If used without <hostname>
denies all guest or anonymous access to this site." Hmm, let's
try:
# echo guestserver >>/etc/ftpaccess
$ ftp 0
Connected to 0.
220 FTP server ready.
Name (0:marcys): ftp
331 Guest login ok, send your complete e-mail address as password.
SOLUTION
Huh ? Now there're 3 possibilities:
1. ftpd bug
2. man page bug
3. Someone misunderstanding all this stuff
Which one's correct ? '2' is the correct answer. The hostname
parameter should be documented as required. To deny anonymous
access on the server, use the defaultserver clause:
defaultserver private
There is another bug in manpage. Patch? It's straightforward -
just do:
sed -e 's/ased/asked/g' /usr/man/man5/ftpaccess.5 >~/abc ;
mv -f ~/abc /usr/man/man5/ftpaccess.5
As for issue above, I don't know yet.