SUMMARY: wu-ftpd wont authenticate users

From: nm <nmanisca_at_vt.edu>
Date: Mon, 13 Sep 1999 17:25:29 -0400

I now have wu-ftpd working under Tru64 5.0 with C2 enabled.

Chad Price already pointed out that this is not the proper
forum for this sort of message, but I think I will post it
anyway just to wrap up the loose end and hopefully help someone
else out later on.

With users whose passwords are longer than 8 characters wu-ftpd
refuses to authenticate them. Shorten the password to 8 or less
and it lets you in just fine.

I saw a message posted by Lachlan Cameron-Smith to a wu-ftpd mailing
list. According to Lachlan, it seems that wu-ftpd 2.5.0 requires a
patch to allow users with passwords of length > 8 chars to log in
when C2 is enabled.

So I applied this patch and a few others. Now longer passwords
work just fine.

Here is what I did:

un-tar'd wu-ftpd-2.5.0.tar
patched with
        data-limit.patch
        mapped.path.overrun.patch
        not.in.class.patch
        deny.not.nameserved.patch
then I patched with c2.patch (included as an attachment)
then issued a ./build du4
all works well now.

Hope this helps someone sometime.

Thanks go out to Lachlan Cameron-Smith.

--
Nick Maniscalco
At 02:05 PM 9/11/99 -0400, you wrote:
>I just installed Tru64 UNIX 5.0 last night.  I have enhanced security
>enabled and running.
>
>I first edited the Makefile and added -lsecurity and -DSECUREOSF.
>
>Then I compiled wu-ftpd 2.5.0 and ensured that the ftpd that was
>built was built with -lsecurity and -DSECUREOSF.
>
>After I installed the binaries I added an entry to inetd.conf so that
>the wu-ftpd would be started instead of the stock ftpd.
>...
>ftp     stream  tcp     nowait  root    /usr/local/sbin/in.ftpd in.ftpd -l
>...
>
>When I try to ftp to this host here is what happens...
>...
>Connected to localhost.
>220 anomaly.stupid.net FTP server (Version wu-2.5.0(1) Sat Sep 11 12:43:52
>EST 1
>999) ready.
>Name (localhost:fb): fb
>331 Password required for fb.
>Password:
>530 Login incorrect.
>Login failed.
>ftp>
>...
>
>The daemon.log contains the following...
>...
>Sep 11 14:03:05 anomaly ftpd[2880]: failed login from localhost
>[127.0.0.1], fb
>Sep 11 14:03:22 anomaly ftpd[2880]: FTP session closed
>...
>
>
>If I try to log in as root it says that root is not allowed to log
>in here, etc...
>
>Any ideas what's going on here?
>
>The whole point of all this is so I can have certain ftp users chroot'd
>into a cage.
>
>Thank you for your time.
>
>--
>Nick
>

Received on Mon Sep 13 1999 - 21:28:02 NZST