Commit Graph
70 Commits
Author SHA1 Message Date
Andrey A. Chernov e425bd5ea4 MFC: 1) back out UTC fix, 2) fix INTERNAL_LS to sense /etc/localtime 1998-05-18 00:07:15 +00:00
Andrey A. Chernov c3d9cb0e86 MFC: return back initial tzset() 1998-05-16 21:29:20 +00:00
Andrey A. Chernov 64374b70af MFC: return vfork back + array range termination 1998-05-15 16:53:45 +00:00
Andrey A. Chernov cb277ac3c8 MFC: use fork vs. vfork 1998-05-15 16:30:46 +00:00
Andrey A. Chernov dafa9879c0 MFC: move TZ="" before exec 1998-05-15 16:09:38 +00:00
Andrey A. Chernov a7e1dce45e MFC:
Do TZ= as first thing, since FTP protocol is unable to tell zone offset in
any case.

It makes no difference for anon account (since chroot already makes it GMT),
but if you do mirror with special non-anon login, in old variant
your mirror will be wholy retransmitted twice in the year due to
time zone changes (/etc/localtime plays bad role here)
1998-05-15 15:08:05 +00:00
Jordan K. Hubbard 04cdd79934 MFC: various minor style nits and one doc bogon. 1998-03-05 12:24:20 +00:00
Jordan K. Hubbard 985f4cbc11 MFC: update for new kerberos flags. 1998-03-05 12:21:16 +00:00
Daniel O'Callaghan f89ede28f4 PR: 5812
Put in the right direction by: Mike Smith and Steve Price

Close syslogging to remove unwanted messages in ftpd's INTERNAL_LS.
1998-02-24 22:18:18 +00:00
Jordan K. Hubbard 7b9a62ea21 MFC: FTPD_INTERNAL_LS -> INTERNAL_LS 1998-02-19 01:07:49 +00:00
David E. O'Brien 73a0bfddbb Proper var to get internal `ls' is "FTPD_INTERNAL_LS". 1998-02-18 11:03:48 +00:00
David E. O'Brien 767c375f9c Add /etc/ftphosts to the FILES section.
Note that ftpmotd is relative to the user's view of /etc.
1998-02-18 10:48:29 +00:00
Warner Losh 84cc83712b MFC:sprintf->snprintf 1997-12-24 19:13:49 +00:00
Philippe Charnier d55e3d33f5 MFC: Cosmetics in man page. Exit(-1) -> exit(1). 1997-12-12 07:20:40 +00:00
Thomas Gellekum 717cddd0af MFC: rename logwtmp() to ftpd_logwtmp(). 1997-09-05 12:45:31 +00:00
David Nugent 576c18b472 MFC: fix usage of hostname variable.
PR: 4135
1997-07-24 10:05:41 +00:00
Daniel O'Callaghan ca77c19193 Tell the chroot()ed user that "access restrictions apply" (YAMFC) 1997-05-21 23:27:12 +00:00
David Nugent e28f66ee9c Merge from current: adds login.conf support & bugfix mmap failure. 1997-05-10 19:48:13 +00:00
David Nugent 4414763f4d Merge from -current: virtual hosting capability. 1997-04-29 12:55:33 +00:00
David Nugent e6874927ec Mandoc fix. 1997-04-27 08:25:42 +00:00
David Nugent c109bf1446 Allow @group entries in /etc/ftpusers and /etc/ftpchroot to (respectively)
deny and chroot ftp access to entire groups.
1997-04-27 08:19:50 +00:00
David Nugent 1cbbbc10fc Marge internal ls changes from -current. 1997-04-26 23:39:31 +00:00
Mike Pritchard 92c252206b YAMFC: remove some incorrect text on how passwords are validated. 1997-03-25 03:55:01 +00:00
Guido van Rooij a13b63d54b YAMFC 1997-02-13 20:07:16 +00:00
David Greenman 42165f24a1 Brought in fixes from 1.30/1.31: fix for signal handler race condition 1997-01-28 07:15:44 +00:00
Mike Pritchard e780e210db YAMFC: add a note to the -l option about configuring syslog. 1997-01-11 20:20:08 +00:00
Poul-Henning Kamp 245110794e YAMFC 1996-12-03 10:53:06 +00:00
Poul-Henning Kamp e327282419 YAMFC 1996-11-21 16:51:15 +00:00
Andrey A. Chernov 43658eac64 Implement alternative strategy if it is impossible to confirm
password: ask for it, but don't tell that S/key password required.
It looks like non-s/key system from outside.

Additionally tell that s/key required when it is so for normal case
1996-10-18 17:09:26 +00:00
Andrey A. Chernov 28fbb50335 Oops, fix my previous commit, now tell user his s/key parameters 1996-10-17 17:46:00 +00:00
Andrey A. Chernov 28ed0fe08b Don't ever ask for password if it is impossible to confirm it
It happens if 1) regular passwords not allowed, 2) skey database
not activated for given user.
Under some rare circumstanes skey_challenge can return empty
diagnostic or even previous buffer, fix it.
1996-10-17 17:06:04 +00:00
Wolfram Schneider 148531ef1e add forgotten $Id$ 1996-09-22 21:56:57 +00:00
Paul Traina 39ea627d62 Fix some compilation warnings. 1996-09-21 18:01:23 +00:00
Julian Elischer 105a3c98b9 Reviewed by: various
Submitted by:	[email protected]

allow ftpd to bind to a single address/interface
this allows easy split services.
1996-08-09 22:22:30 +00:00
Mark Murray 9aca17cb12 Tidy up the Kerberised bits. While I'm here, fix some -Wall complaints. 1996-08-09 09:02:31 +00:00
Poul-Henning Kamp 3cde2031c8 Fix another bogon. 1996-08-06 14:29:06 +00:00
Poul-Henning Kamp 0bb6e9ed65 Make password checking in ftpd work again. 1996-08-06 08:43:43 +00:00
Paul Traina a5a4544e77 Convert STATS and PARANOID to run-time options.
Document the new -R (relax paranoia) option.

From NetBSD/Lite2: code and man page cleanups, Kerberos IV hooks
(relax, we're still exportable), and /etc/ftpchroot feature for
semi-anonymous accounts
1996-08-05 00:21:15 +00:00
Paul Traina 61f891a6df If PARANOID is set, do not allow PORT commands to remote ports less than 1024
or addresses other than the requestor's address.  This violates the FTP
protocol (hmm...as I write this, I'm going to change this to a run-time var.)

Require login before PASV and RNTO commands.

Close unused PASV ports so they don't hang around forever.

Do not allow file overwrites via rename or STOR when anonymous
(suspenders).

Clean up buffer utilization.

My code, but heavily inspired by Hobbit's changes to wu-ftpd as pointed out
by Mike Prettejohn and Kit Knox.
1996-08-04 22:40:35 +00:00
Andrey A. Chernov 333468bac7 If hostname > UT_HOSTSIZE, use its numerical address instead to keep
valid utmp and wtmp entries
1996-06-17 14:59:07 +00:00
Poul-Henning Kamp 6b5139742c backout yacc changes 1996-06-02 17:10:13 +00:00
Peter Wemm 40e9d39e59 Use the sysctl settable data port ranges rather than the statically
compiled values.  see sysctl net.inet.ip.portrange.* and the IP_PORTRANGE
discussion in <netinet/in.h>
1996-05-31 03:10:25 +00:00
Poul-Henning Kamp 9ad70fa0b2 Fix yacc rule usage. 1996-05-30 21:29:03 +00:00
David Greenman cf09a2067c Implemented a "-D" option that causes ftpd to detach and become a daemon -
accepting connections on the FTP port and forking children processes to
handling them. This is lower overhead than spawning ftpd from inetd and
can be a significant win on busy FTP servers. Be sure to disable ftpd in
inetd.conf if you decide to use this option.
These changes are based on similar changes I made to wu-ftpd and have
been in use on wcarchive for several months.
1996-04-11 10:22:16 +00:00
David Greenman 1332892bcf Fix bug that caused a coredump when attempting to enter passive mode when
not logged in. Original fix slightly altered by me to return the correct
reply code.

Submitted by:	Vadim Kolontsov <[email protected]>
1996-03-18 11:09:03 +00:00
Peter Wemm b63e1fe2c4 Make ftpd use setproctitle() from libutil
I've left the old code in there under #ifdef OLD_SETPROCTITLE in case
somebody wants to try to compile out ftpd on some other machine.
1996-01-01 08:35:11 +00:00
Guido van Rooij d6ed3c374d Timeout when an expected accept does not happen after all.
This gets rids of dozens of hanging ftpd's because some broken
pc implementation `forgets' to open a passive connection.
Obtained from: Wietse Venema
1995-11-29 19:52:30 +00:00
Mike Pritchard ae532ecb79 Check for expired passwords before allowing access to the system. 1995-08-28 21:30:59 +00:00
Paul Traina 4c450ad7a7 Use data ports in the range 40000..44999 by default to enhance FTP usability
in a firewall environment.  Original idea by Mark Tracy (?).

Reviewed by:	wollman
Submitted by:	pst
1995-08-05 19:12:05 +00:00
Rodney W. Grimes 6c06b4e2aa Remove trailing whitespace. 1995-05-30 05:51:47 +00:00