/etc/shells and /etc/ftponly no longer work after patching wuftpd 2.6.2

"Preet Dhillon" <[email protected]> Thu, 28 Apr 2005 17:21:21 +0100
Newsgroups gmane.network.ftp.wuftpd.user
Message-ID <[email protected]>
**********************************************************************************************
Your attention is drawn to the warning notice at the end of this message.
**********************************************************************************************

Dear All, 

I configured my wuftp to restrict interactive shell access following the
procedures described in
http://www.landfield.com/wu-ftpd/ftponly/ftponly.html

I began by creating the file /etc/ftponly : 

# cat /etc/ftponly
#!/bin/sh
#
# DO NOT DELETE
#
echo "FTP ONLY"
exit 0
#

And set the permissions correctly : 

# ls -l /etc/ftponly
-rwxr-xr-x   1 root     other         53 Mar  2 16:27 /etc/ftponly

Then created the file /etc/shells : 

# cat /etc/shells
/etc/ftponly

# ls -l /etc/shells
-rw-r--r--   1 root     other         13 Apr 28 16:44 /etc/shells

And this was working fine. I could ftp to the server but not telnet to
it. All well so far. 

I then installed the following patches as mentioned on the wuftp site
http://www.wu-ftpd.org/ : 

Realpath.patch
Connect-dos.patch and 
Skeychallenge.patch

Then re-ran the ./configure, make and make install to recompile wuftpd. 

However, when I try to log in to the new wuftpd, I see the following
error : 

# ftp localhost
Connected to localhost.
220 localhost FTP server (Version wu-2.6.2(2) Thu Apr 28 16:31:45 BST
2005) ready.
Name (gate:pdhillon):
331 Password required for pdhillon.
Password:
530 Login incorrect.
Login failed.
ftp> quit

If I delete the /etc/shells file, then the above ftp works correctly. It
appears therefore that my /etc/ftponly and /etc/shells is not working on
the newly patched version of wuftpd. It was working fine before I
patched and recompiled it. 

Has anyone seen this before or have anything to suggest to resolve it? 

Thanks and regards,
Preet


***********************************************************************************
We would ask you to treat any communication from us as confidentially as you would want us to treat communication from you.  If you are not an intended recipient, please notify [email protected] immediately. You should know that some of our communications may contain confidential information which it could be a criminal offence for you to disclose or use without authority. This e-mail is not intended nor should it be taken to create any legal relations, contractual or otherwise.
The Financial Services Authority 
25 The North Colonnade, Canary Wharf, London E14 5HS United Kingdom
Registered as a Limited Company in England and Wales No.1920623. Registered Office as above 
Switchboard: 020 7066 1000
Web Site:   http://www.fsa.gov.uk
***********************************************************************************