wu-ftpd on HP-UX 10.20

[Jose Mosquera]

Hi Pals,

I have installed the depot file from http://hpux.cs.utah.edu/hppd/hpux/Networking/FTP/wu_ftpd-2.6.1/. Also si installed the ftp commulative patch PHNE_23948. After this I have tryed a simple test placing a loggin name into /etc/ftpd/ftpusers to avoid ftp capability but after this user keeps doing ftp.

I have checked the correct instalation of software above indicated:

#swlist -l fileset -a state|grep ftp
# wu_ftpd
wu_ftpd.wu_ftpd-MAN configured
wu_ftpd.wu_ftpd-RUN configured

#swlist -l product|grep ftp
PHNE_12665 B.10.00.00.AA tftpd(1M) patch
PHNE_23948 B.10.00.00.AA ftpd(1M) and ftp(1M) cumulative patch
wu_ftpd 2.6.1 wu_ftpd

I have strong experience of wu-ftpd under 11.0 but in 10.20 I am needing a lifeboat..!

Somebody help me about?

Rgds

[Christopher Caldwell]

I'd imagine that the depot from the porting center and the patch from HP aren't compatible. The patch is for HP's build, which may or may not work on the depot from the porting archive.

There's a vulnerability in 2.6.1. I'd go get 2.6.2 from www.wu-ftpd.org (or patch 2.6.1 with the patch that's available from www.wu-ftpd.org).

[Bill McNAMARA_1]

There are some specific wu configuration that may be overriding this:
search for ftpusers in
http://www.wu-ftpd.org/man/ftpaccess.html
http://www.wu-ftpd.org/man/

Also http://www.wu-ftpd.org/ will refer you to an email link for support.

[Shannon Petry]

The Porting center is not HP, and should not be confused with them. The porting center is excatly as it's name refers. GNU/GPL code is "ported" to HP-UX.

If you installed both packages, then they are in 2 locations, and 2 configurations exist. Depending on which one you installed last, the config could be in /opt/wu?ftp or in /etc/ftpd.
From the porting center side, I have always used /etc/ as the default location for ftpaccess, ftpusers, etc...
From HP distributions it may/may not be the same.

Best bet is to re-install ONE of the packages, and go through the provided read-me's to see which files need to be where.

Regards,
Shannon

[Jose Mosquera]

Shannon,

In fact, I have redefined in /etc/inetd.conf the ftp sentence from:
ftp stream tcp nowait root /usr/lbin/ftpd ftpd -l
to:
ftp stream tcp nowait root /usr/lbin/ftpd ftpd -l

After this all definitions on /opt/wu_ftpd/etc/ftpusers and /opt/wu_ftpd/etc/ftpaccess are working fine. But now when a user enter in your ftp-homedir (/home/ftpsec/./)any file or directory is not listed, I have tryed resolve this trouble following these steps but anything happens:

cd /home/ftpsec
mkdir -p /usr/bin
chmod -R 555 usr
cp -p /sbin/ls /home/ftpsec/usr/bin

Am I forgetting something?

Rgds

[Jose Mosquera]

Forget previous message.

Shannon,

In fact, I have redefined in /etc/inetd.conf the ftp sentence from:
ftp stream tcp nowait root /usr/lbin/ftpd ftpd -l
to:
ftp stream tcp nowait root /opt/wu_ftpd/sbin/ftpd -l

After this all definitions on /opt/wu_ftpd/etc/ftpusers and /opt/wu_ftpd/etc/ftpaccess are working fine. But now when a user enter in your ftp-homedir (/home/ftpsec/./)any file or directory is not listed, I have tryed resolve this trouble following these steps but anything happens:

cd /home/ftpsec
mkdir -p /usr/bin
chmod -R 555 usr
cp -p /sbin/ls /home/ftpsec/usr/bin

Am I forgetting something?

Rgds

[Christopher Caldwell]

I believe /sbin/ls goes in ~/bin/ls (the change root point)
not
~/usr/bin/ls

[Jose Mosquera]

Christopher,

In fact, I have changed from ~/usr/bin/ls to ~/bin/ls and all files are listed now. Thank you too by the wu-ftpd port tip.

About vulnerability in 2.6.1, How I can install non-depots files (2.6.1 patch or 2.6.2 version) in HP-UX 10.20?

Rgds

[Jose Mosquera]

Hi Pals,

I have downloaded wu-ftpd-2.6.2.tar.gz from http://www.wu-ftpd.org/. So, to build from binary I have executed ./configure sucessfully but when I try execute make (2nd step) the file "yacc" is not found generating an error code 1 exit. Anybody know where can I found a wu-ftpd-2.6.2.depot to HP-UX 10.20?

Rgds