Adding a new ftp "site exec" command

[Charles Fisher_1]

I've been tasked with exchanging data with some AS/400 users.

These users transfer data with ftp, then run a "quot rcmd..." command within their ftp client to run a program on the remote system.

They would like to be able to do something similar to our HP-UX servers, and "site exec" looks like the optimal candidate.

1. Is there any way to configure the stock HP-UX ftpd to "site exec" additional programs via a config file?

2. Is there any critical security concern in doing so?

3. If the stock daemon cannot do this, is the source code available so I can add this functionality?

4. If not, does anybody have experience in doing this with wu-ftpd? They're doing some of the parsing with yacc, and my C is rusty...

[S.K. Chan]

Some threads that would answer your questions.

http://forums.itrc.hp.com/cm/QuestionAnswer/1,,0xfce5f9beca68d511abcd0090277a778c,00.html

http://forums.itrc.hp.com/cm/QuestionAnswer/1,,0xa2b3d06ed8c8d4118fef0090279cd0f9,00.html

[Charles Fisher_1]

In using the /etc/ftpd/ftp-exec method, my 10.20 systems do not implement SITE EXEC, but this method works on an 11.11 system.

There is no PHNE_21936 for hpux 10.20. What can I do to make this work under 10.20?

Why isn't there any mention of /etc/ftpd/ftp-exec in the documentation under any of the OS releases?

[James R. Ferguson]

Hi Charles:

The Washington University version of ftp is intrinsically part of 11.x. For 10.x you can get a version here:

http://hpux.cs.utah.edu/hppd/hpux/Networking/FTP/wu_ftpd-2.6.1/

Regards!

...JRF...

[Charles Fisher_1]

According to www.wu-ftpd.org, there is a vulnerability in 2.6.1, so I will just go ahead and build the binary for 2.6.2.

I wish that HP-UX had an up2date utility - this means that my 11.11 servers are vulnerable.

Thanks for both your efforts, though.