Security proxy-suite-1.9.2.2

Hello,

We are trying to use ftp-proxy in our structure and we've noticed the
following behaviour with the simple Bind to the Ldap directory.
The first simple BIND made to the server ldap (Iplanet) returns the
following result according to password.

In Ftp-client:

- With good user and bad password: result=invalid credentials , it's not 
ok (normal)

- With good user and password : result= succeed (normal)

- without password (but good user): result = succeed  the proxy 
continues to process the ftp request (strange!)

I read the code of proxy-suite-1.9.2.2, and i write a correction

In ftp-ldap.c ligne 184:

     // Patch Fred Bug mot de passe nul

     if (*pwd == '\0') {
     syslog_write(U_ERR, "Bad password");
     exit(-1);
     }

I work on various modifications for ftp-proxy (ex: identification
with Ldap Group) and that works correctly.

But i have one question, i want to create policy rules for destination 
(not for user)
Is it already possible ?

For sample:

permit:

IPserverftp -> for all destination IP
->;cmds=ALLO,APPE,DELE,MKD,RMD,RNFR,RNTO,STOR,STOU

And

IPserverftp -> 10.0.0.1->;All cmds

Cordially


-- 

Cordialement

Bourgeois Frédéric

Ministère de l'intérieur
DSIC/SDIEE/BEERTD/CGN/
Section THESEE

Frederic.bourgeois (nospam) @interieur.gouv.fr


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]