RE: Question on PURE-FTP

Hi Pedram,

Sorry for the missing attachment. I think the network server dropped it =
for
some reasons. I'll copy the config file below.

Basically I set up a DHCP server along with a FTP server (on the same =
box),
so when our SUT is booted, it'll get ip address and the FTP serve ip =
address
from the DHCP server. Then it'll download the required configuration =
file
from the FTP server.

I had the PURE-FTPD set up but there was no file downloading during SUT
device restart. One guy from the SUT device team thought PURE-FTPD may =
have
SSL/TLS enabled while the SUT device doesn't support SSL/TLS yet and he
wanted to set up another FTP server which functions under "normal" =
condition
i.e. without SSL/TLS being enabled.=20

That was the background story. I've confirmed that the "normal" and =
"secure"
categories that were mentioned by the person were related to the =
SSL/TLS.

I'm trying to figure out why the file downloading not happening with
PURE-FTPD? BTW, we have another DHCP server running with Redhat Linux =
and
the FTP server there is running just fine.

To answer your questions:

a. I can start PURE-FTPD (from Linux CLI) and I can check it's running. =
I'm
not sure about the virtual user or system user. Do I need to set up
database? I just wanted to set up a FTP server and download the config =
file
to the device, that's it. I can't afford too much time on this.

b&c. I haven't tried uploading file. But I know downloading file was NOT
working. The very same SUT device could get ip address from the same =
Linux
box where FTP server is located.
Also, I just installed TFTP server on this Linux box, and it was working
fine i.e. file downloading was okay.

d. Explained above.


Here's the PURE-FTPD configuration file (sorry for the long email):

=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D

# Config file for /etc/init.d/pure-ftpd
##Comment variables out to disable its features, or change the values in
it... ##

## This variable must be uncommented in order for the server to start ##
IS_CONFIGURED=3D"yes"

## FTP Server,Port (separated by comma) ##
## If you prefer host names over IP addresses, it's your choice :
## SERVER=3D"-S ftp.rtchat.com,21"
## IPv6 addresses are supported.
## !!! WARNING !!!
## Using an invalid IP will result in server not starting and reporting
## a good start. Work is being done to solve that in:
## http://bugs.gentoo.org/show_bug.cgi?id=3D75861
#SERVER=3D"-S 192.168.0.1,21"
SERVER=3D"-S 70.150.217.199,21"

## Number of simultaneous connections in total, and per ip ##
MAX_CONN=3D"-c 30"
MAX_CONN_IP=3D"-C 10"

## Start daemonized in background ##
DAEMON=3D"-B"

## Don't allow uploads if the partition is more full then this var ##
DISK_FULL=3D"-k 90%"

## If your FTP server is behind a NAT box, uncomment this ##
#USE_NAT=3D"-N"

## Authentication (others are 'pam', ...)##
## Further infos in the README file.
AUTH=3D"-l unix"

## Change the maximum idle time. (in minutes. default 15)
#TIMEOUT=3D"-I <timeout>'"

## Use that facility for syslog logging. It defaults to 'ftp'
## Logging can be disabled with '-f none' .
#LOG=3D"-f facility"

## Misc. Others ##
MISC_OTHER=3D"-Y 0 -A -x -j -R -B"

#
# Use these inside $MISC_OTHER
# More can be found on "http://pureftpd.sourceforge.net/README"
#
# -A [ chroot() everyone, but root ]
# -e [ Only allow anonymous users ]
# -E [ Only allow authenticated users. Anonymous logins are prohibited. =
]
# -i [ Disallow upload for anonymous users, whatever directory perms are =
]
# -j [ If the home directory of a user doesn't exist, auto-create it ]
# -M [ Allow anonymous users to create directories. ]
# -R [ Disallow users (even non-anonymous ones) usage of the CHMOD =
command ]
# -x [ In  normal  operation mode, authenticated users can read/write
#	files beginning with a dot ('.'). Anonymous users can't, for
security reasons
#	(like changing banners or a forgotten .rhosts). When '-x' is used,
authenticated
#	users can download dot-files, but not overwrite/create  them,  even
if they own
#	them. ]
# -X [ This  flag  is  identical  to  the  previous one (writing
#       dot-files is prohibited), but in addition, users can't even =
*read*
files and
#       directories beginning with a dot (like "cd .ssh"). ]
# -D [ List files beginning with a dot ('.') even when the client =
doesn't
#      append the '-a' option to the list command. A workaround for =
badly
#      configured FTP clients. ]
# -G [ Disallow renaming. ]
# -d [ Send various debugging messages to the syslog. ONLY for DEBUG ]
# -F <fortune file> [ Display a fortune cookie on login. Check the =
README
file ]
# -H [ By default, fully-qualified host names are logged. The '-H' flag
avoids host names resolution. ]


=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D

=20

> -----Original Message-----
> From: Pedram Ebrahimian-Diznabi [mailto:[email protected]]=20
> Sent: Tuesday, January 10, 2006 4:27 PM
> To: [email protected]
> Subject: RE: [pureftpd] Question on PURE-FTP
>=20
> Hi Jim,
>=20
> As I said I'm unsure as to what you meant, and yes you are=20
> right. ssl/tls will be disabled by default and unless you=20
> have configured it will not be enabled (btw I didn't get any=20
> attachments from you)
>=20
> could you explain what you are trying to do again? what is=20
> failing? you mentioned "why couldn't PURE-FTPD download the=20
> file that I was expecting?" what file?=20
>=20
> I have few question:
> a) are you able to start pure-ftpd and login to it (do you=20
> have virtual users or system users)
> b) are you able to upload files to your ftp?
> c) are you able to download files off the ftp?
> d) get the individual who made the comment about 'secure' and=20
> 'normal' to elaborate on his comment.
>=20
> -----Original Message-----
> From: Jim Li [mailto:[email protected]]
> Sent: Tuesday, January 10, 2006 3:27 PM
> To: Pedram Ebrahimian-Diznabi; [email protected]
> Subject: RE: [pureftpd] Question on PURE-FTP
>=20
>=20
>=20
> Hi Pedram,
>=20
> Thanks for the info.
>=20
> But I still have some questions:
>=20
> 1. By reading http://www.pureftpd.org/README.TLS, it seems=20
> that PURE-FTPD will disable the SSL/TLS by default i.e. my=20
> system should NOT have SSL/TLS enabled (to the best of my=20
> knowledge) unless specifically done by someone.
>=20
> 2. Even with --tls=3D1/2 added, but without the SSL security=20
> certificate, SSL/TLS should not be able to function as=20
> designed i.e. the PURE-FTPD will function as non-secured.
>=20
> 3. With 1) and 2) being ruled out (is my assumption=20
> correct?), why couldn't PURE-FTPD download the file that I=20
> was expecting? Do I miss the directory path for the PURE-FTPD=20
> to locate the file? The config file doesn't include this=20
> info. Is /var/ftp the default FTP directory for PURE-FTPD?
>=20
> I've attached the PURE-FTPD config file, please take a look=20
> if I missed anything.
>=20
> Many thanks.
>=20
> Jim
>=20
>=20
>=20
> > -----Original Message-----
> > From: Pedram Ebrahimian-Diznabi [mailto:[email protected]]
> > Sent: Monday, January 09, 2006 5:48 PM
> > To: [email protected]
> > Subject: RE: [pureftpd] Question on PURE-FTP
> >=20
> > When you talk about normal and secure only two things come to mind.
> >=20
> > Normal: no encryption
> > Secure: with encryption
> >=20
> > Depending on how you have compiled PURE-FTPD you will have:
> >=20
> > a) SSL/TLS encryption layer disabled (default)
> > b) accepts both none encrypted and encrypted sessions
> > c) only accepts SSL/TLS sessions
> >=20
> > from what you have mentioned, you may have compiled PURE-FTPD with=20
> > (--with-tls)
> >=20
> > and you are running PURE-FTPD with (--tls=3D2)
> >=20
> > if this is so, you can fix the problem by running PURE-FTPD with=20
> > --tls=3D1 or 0 (http://www.pureftpd.org/README.TLS for more info)
> >=20
> > or if you are running PURE-FTPD with the config file
> > (/usr/local/etc/pure-ftpd.config) Scroll down, and change the=20
> > TLS 		2
> > to
> > TLS		0 or 1 (review the above page)
> >=20
> > I hope that helped, I was unclear as to what you meant by normal I=20
> > only assumed you meant this.
> >=20
> > -----Original Message-----
> > From: Jim Li [mailto:[email protected]]
> > Sent: Monday, January 09, 2006 5:23 PM
> > To: 'DervishD'
> > Cc: [email protected]
> > Subject: RE: [pureftpd] Question on PURE-FTP
> >=20
> >=20
> > Hi Folks,
> >=20
> > First of all, thanks for the reply.
> >=20
> > I got the PURE-FTPD set up and somebody told me that one of our=20
> > devices only supports "normal" login and file transfer vs=20
> the "secure"=20
> > way. So unless I could find a way to change the PURE-FTPD=20
> to "normal"=20
> > category, I would not be able to continue my work with the=20
> PURE-FTPD.
> >=20
> > (I've sent out email to the person who used the terms and=20
> haven't got=20
> > reply yet. Here is the excerpt which the "normal"
> > and "secure" categories were first mentioned: "The login and file=20
> > transfer is divided into two categories ..secure and normal.")
> >=20
> > Please let me know if this helps to clarify.
> >=20
> > I'm going through RFC959 to see if the document can shed some light.
> >=20
> > Thanks again for the help.
> >=20
> >=20
> > Jim
> >=20
> >=20
> >=20
> > > -----Original Message-----
> > > From: DervishD [mailto:[email protected]]
> > > Sent: Monday, January 09, 2006 5:05 PM
> > > To: Jim Li
> > > Cc: [email protected]
> > > Subject: Re: [pureftpd] Question on PURE-FTP
> > >=20
> > >     Hi Jim :)
> > >=20
> > >  * Jim Li <[email protected]> dixit:
> > > > Could anyone help me on if PURE-FTPD supports "normal" mode
> > > in terms
> > > > of login and file transfer? I.e. does PURE-FTPD support=20
> only the=20
> > > > "secure" mode?
> > >=20
> > >     I don't know what you mean with "normal" and "secure"=20
> > > mode. Can you ellaborate on that? Probably there's a way of using=20
> > > "normal" mode in pure-ftpd (although it may involve
> > patching), but I
> > > need to know what do you mean by "normal"
> > > and "secure" modes ;)
> > >=20
> > >     Ra=FAl N=FA=F1ez de Arenas Coronado
> > >=20
> > > --
> > > Linux Registered User 88736 | http://www.dervishd.net=20
> > > http://www.pleyades.net & http://www.gotesdelluna.net It's
> > my PC and
> > > I'll cry if I want to...
> > >=20
> > >=20
> >=20
> ---------------------------------------------------------------------
> > > To post a new message, e-mail: [email protected] To unsubscribe,
> > > e-mail: [email protected] For additional
> > commands, e-mail:=20
> > > [email protected]
> > >=20
> > >=20
> >=20
> >=20
> >=20
> ---------------------------------------------------------------------
> > To post a new message, e-mail: [email protected] To unsubscribe,=20
> > e-mail: [email protected] For additional=20
> commands, e-mail:=20
> > [email protected]
> >=20
> >=20
> >=20
> ---------------------------------------------------------------------
> > To post a new message, e-mail: [email protected] To unsubscribe,=20
> > e-mail: [email protected] For additional=20
> commands, e-mail:=20
> > [email protected]
> >=20
> >=20
>=20
>=20
> ---------------------------------------------------------------------
> To post a new message, e-mail: [email protected] To=20
> unsubscribe, e-mail: [email protected] For=20
> additional commands, e-mail: [email protected]
>=20
>=20


---------------------------------------------------------------------
To post a new message, e-mail: [email protected]
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]