Mark Murray
5bc9d93db3
Add full PAM support for account management and sessions.
...
The PAM_FAIL_CHECK and PAM_END macros in su.c came from the util-linux
package's PAM patches to the BSD login.c
Submitted by: "David J. MacKenzie" <djm@web.us.uu.net>
2001-03-27 19:40:51 +00:00
Jonathan Lemon
6d10cb2f6f
Teach ftpd about the new GLOB_MAXPATH flag.
2001-03-19 19:11:00 +00:00
Dag-Erling Smørgrav
1f15c0d66c
When the file was transferred using sendfile(2), we forgot to keep track
...
of the transferred byte count. MFC candidate.
PR: bin/25699
2001-03-11 13:20:44 +00:00
Dan Moschuk
f6f0c4b90d
In send_data(), use sendfile() instead of the mmap() algorithm.
2000-12-20 03:34:54 +00:00
Poul-Henning Kamp
a4b77a2aaa
Add option -E to disable EPSV which throws certain stateful firewalls
...
into confusion.
Add option -r to make ftpd support only read-only operations.
Submitted by: Flemming (F3) Jacobsen <fj@batmule.dk>
Reviewed by: phk
2000-12-16 19:19:19 +00:00
Kris Kennaway
3fb3b78f0f
Format string paranoia
2000-11-19 12:46:16 +00:00
Guido van Rooij
ea413ab7ad
Fix broken PAM with SKEY behaviour: the skey.access file checks
...
were broken because the code failed to set PAM_RHOST.
2000-10-12 10:21:05 +00:00
Garrett Wollman
eb2fc78027
Don't depend on <sys/stat.h> bogusly including <sys/time.h> (and thereby
...
<time.h>).
2000-10-10 01:50:26 +00:00
Sheldon Hearn
90906a46ea
Don't set an arbitrary limit on username lengths; use MAXLOGNAME
...
instead.
PR: 20675
Submitted by: Vladimir B Grebenschikov <vova@express.ru>
2000-08-17 12:31:17 +00:00
Ruslan Ermilov
2310b8c624
Fix `control socket: Protocol not supported' failure in
...
standalone -D mode when neither -4 nor -6 is specified.
2000-08-16 09:12:33 +00:00
Sheldon Hearn
028f24cffa
Honour skey.access(5) by allowing UNIX passwords when skeyaccess(3)
...
has set pwok to a non-zero value.
Previously, the fact that skey.access(5) allowed UNIX passwords for
this connection attempt was ignored, even in the NOPAM case.
This only addresses the NOPAM case; when libpam is used, the problem
will persist.
PR: 20333
2000-08-01 13:58:55 +00:00
David Nugent
b535a9bf12
Fix a problem in the virtual host address compare code which caused
...
duplicated host entries in /etc/ftphosts not to be folded. Make sure
we exit the loop on a match.
PR: bin/19390
2000-06-26 05:36:09 +00:00
Nick Sayer
2db39860cf
1. Add IPv6 portrange restriction code (-U flag) to passive().
...
2. Add portrange restriction code (for both v4 and v6) to the EPSV
processing stuff.
2000-05-25 19:30:18 +00:00
Yoshinobu Inoue
f38c6cadf9
Add more dual stack consideration.
...
-ftpd need to know each of AF_INET and AF_INET6 addr for hosts specified in
/etc/ftphosts.
Approved by: jkh
2000-02-10 19:51:30 +00:00
Yoshinobu Inoue
b3ea3170b3
Fix ftpd core dump when hostname is not set.
...
When hostname is not set, ftpd core dumps, because there is no
NULL check for freeing name resolving information for its own
hostname.
So the check is added.
Approved by: jkh
2000-02-03 09:59:36 +00:00
Yoshinobu Inoue
4dd8b5ab79
another tcp apps IPv6 updates.(should be make world safe)
...
ftp, telnet, ftpd, faithd
also telnet related sync with crypto, secure, kerberosIV
Obtained from: KAME project
2000-01-27 09:28:38 +00:00
Mark Murray
6c9134c067
Fix for new Kerberos4. Make a fist cut at PAM-ising while I'm here.
1999-09-19 22:05:32 +00:00
Michael Haro
9db4bbf32a
When a STAT command is sent to ftpd as an out-of-band transmission during
...
a file transfer, the command was mishandled on every other receipt of the
command.
PR: 13261
Submitted by: Ian Lepore <ian@plutotech.com>
1999-09-12 01:27:46 +00:00
Peter Wemm
7f3dea244c
$Id$ -> $FreeBSD$
1999-08-28 00:22:10 +00:00
Peter Wemm
1713064734
unifdef -DINTERNAL_LS - it's too useful to be off by default. If anyone
...
really dislikes this, we could add a switch to disable it at runtime and
check in popen.c.
1999-08-26 00:45:36 +00:00
Warner Losh
859663719d
More egcs warning fixes:
...
o main returns int not void
o use return 0 at end of main when needed
o use braces to avoid potentially ambiguous else
o don't default to type int (and also remove a useless register
modifier).
Reviewed by: obrien and chuckr
1999-04-25 22:23:38 +00:00
Brian Somers
9e9a43bdec
Ensure that things returned by gethostname() and
...
friends are terminated and allow for a maximum
host name length of MAXHOSTNAMELEN - 1.
Put parenthesis around sizeof args.
Make some variables static.
Fix telnetd -u (broken by my last commit)
Prompted by: bde
1999-04-07 08:27:45 +00:00
Brian Somers
32af26a501
Use realhostname() rather than various combinations of
...
gethostbyaddr() & gethostbyname().
Remove brokeness in ftpd for hosts of MAXHOSTNAMELEN length.
1999-04-06 23:06:00 +00:00
Dag-Erling Smørgrav
e6fa0d4308
Set the user context correctly so that cd ~ does the right thing.
...
PR: bin/7943 bin/8293
Submitted by: Bill Fenner <fenner@parc.xerox.com>
Approved by: jkh
1998-10-13 20:42:01 +00:00
John Birrell
158a00b20e
signal() returns SIG_ERR on error, not int.
...
time() requires a time_t pointer, not a long.
1998-06-03 11:33:44 +00:00
Steve Price
7edcb9366e
Make ftpd(8) honor its default group setting in the config files.
...
PR: 6682
Submitted by: Max Euston <meuston@jmrodgers.com>
1998-05-25 03:45:35 +00:00
Andrey A. Chernov
34d1ba5cd5
Return back initial tzset() must be before first chroot
1998-05-16 21:23:33 +00:00
Andrey A. Chernov
46589cb624
Move TZ="" assignment just before exec to not touch other time stuff
1998-05-15 16:08:52 +00:00
Andrey A. Chernov
2903069462
Do TZ= as first thing, since FTP protocol is unable to tell zone offset in
...
any case.
It makes no difference for anon account (since chroot already makes it GMT),
but if you do mirror with special non-anon login, in old variant
your mirror will be wholy retransmitted twice in the year due to
time zone changes (/etc/localtime plays bad role here)
1998-05-15 15:06:58 +00:00
David Greenman
dadb9fb334
Set TCP_NODELAY on the control channel to improve performance a bit.
1998-04-28 03:37:23 +00:00
Eivind Eklund
f5c57d05c1
Make ftpd log IP-addresses in addition to hostnames.
1998-02-24 08:45:57 +00:00
Warner Losh
e760ef2c35
Various sprintf -> snprintf fixes.
...
Minor style fix (strcpy(foo,"") -> *foo = '\0')
Obtained from: OpenBSD(?)
1997-12-24 19:13:23 +00:00
Philippe Charnier
e02897fa5b
Cosmetics in man page. Exit(-1) -> exit(1).
1997-11-21 07:38:43 +00:00
Thomas Gellekum
986a117274
Hopefully better fix for logwtmp(): rename to a private
...
version ftpd_logwtmp().
1997-09-05 11:44:00 +00:00
David Nugent
0512556a48
Make useage of hostname global variable consistent.
...
PR: 4135
Based on submitted patch by: blank@fox.uni-trier.de
1997-07-24 09:26:12 +00:00
Daniel O'Callaghan
3401a71f4e
Tell the chroot()ed user that "access restrictions apply".
1997-05-21 23:24:41 +00:00
David Nugent
5d0bfe39ec
login_getclass() -> login_getpwclass().
1997-05-10 19:02:03 +00:00
David Nugent
ea4e54b942
Adds anon ftp virtual host capability to ftpd, using /etc/ftphosts for
...
definition of a system's virtual hosts.
1997-04-29 12:42:08 +00:00
David Nugent
31fea7b8f2
YAMF2.2: Allow @group entries in /etc/ftpusers & /etc/ftpchroot to deny
...
and allow chroot access to entire groups.
1997-04-27 08:29:21 +00:00
David Nugent
af85d782fd
Adds optional "internal ls" support for ftpd, by collecting
...
modules from src/bin/ls, and handling exec(_PATH_LS,..) as a
special case, very useful in an environment where many users
are given chroot access. "~/etc/{s}pwd.db" files are still
needed if uid/gid->user/group translation is desired.
To enable this it must be compiled with the make variable
FTP_INTERNAL_LS defined, either in /etc/make.conf or the
environment.
1997-04-26 12:12:10 +00:00
David Nugent
b071c689de
Add basic login.conf (sans authentication) support.
1997-04-23 04:56:39 +00:00
Warner Losh
91477cc4d7
compare return value from getopt against -1 rather than EOF, per the final
...
posix standard on the topic.
1997-03-28 15:48:21 +00:00
Peter Wemm
9e522f7a18
Revert $FreeBSD$ to $Id$
1997-02-22 14:22:49 +00:00
Guido van Rooij
c65c314e66
Actually allow the -R flag.
1997-02-13 19:24:25 +00:00
David Greenman
ac7636cbfc
Oops, fix white space in last commit.
1997-01-28 07:09:05 +00:00
David Greenman
0b4df2eec2
Fix signal handler race condition.
1997-01-28 07:06:54 +00:00
Alexander Langer
8abdc2eb40
Sweep through the tree fixing mmap() usage:
...
- Use MAP_FAILED instead of the constant -1 to indicate
failure (required by POSIX).
- Removed flag arguments of '0' (required by POSIX).
- Fixed code which expected an error return of 0.
- Fixed code which thought any address with the high bit set
was an error.
- Check for failure where no checks were present.
Discussed with: bde
1997-01-16 21:58:40 +00:00
Jordan K. Hubbard
1130b656e5
Make the long-awaited change from $Id$ to $FreeBSD$
...
This will make a number of things easier in the future, as well as (finally!)
avoiding the Id-smashing problem which has plagued developers for so long.
Boy, I'm glad we're not using sup anymore. This update would have been
insane otherwise.
1997-01-14 07:20:47 +00:00
Torsten Blum
5a392aec2b
add flag to allow only anonymous ftp logins
...
Reviewed by: pst
1996-11-30 12:00:25 +00:00
Paul Traina
dacc975297
Conditionalize setsockopt IP_PORTRANGE to make ftpd portable.
1996-11-20 22:13:51 +00:00