ip/ftpd: Add explict and implicit FTPS support.
Removed: - Challenge reponse auth. - Noworld login. - Anonymous users writing files to /incoming.
This commit is contained in:
parent
9633c9fc65
commit
e72da62915
2 changed files with 997 additions and 1830 deletions
|
@ -12,9 +12,11 @@ telnetd, rlogind, rexexec, ftpd, socksd, hproxy \- Internet remote access daemon
|
||||||
.B ip/rexexec
|
.B ip/rexexec
|
||||||
.PP
|
.PP
|
||||||
.B ip/ftpd
|
.B ip/ftpd
|
||||||
.RB [ -aAde ]
|
.RB [ -aAdei ]
|
||||||
.RB [ -n
|
.RB [ -n
|
||||||
.IR namepace-file ]
|
.IR namepace-file ]
|
||||||
|
.RB [ -c
|
||||||
|
.IR cert-path ]
|
||||||
.PP
|
.PP
|
||||||
.B ip/socksd
|
.B ip/socksd
|
||||||
[
|
[
|
||||||
|
@ -113,32 +115,20 @@ standard Plan 9 authentication (see
|
||||||
.IR authsrv (6)).
|
.IR authsrv (6)).
|
||||||
.PP
|
.PP
|
||||||
.I Ftpd
|
.I Ftpd
|
||||||
runs the Internet file transfer protocol. Users may transfer
|
runs the Internet file transfer protocol. It supports both
|
||||||
|
implicit and explicit ftps. Users may transfer
|
||||||
files in either direction between the local and
|
files in either direction between the local and
|
||||||
remote machines.
|
remote machines.
|
||||||
As for
|
There are two types of login:
|
||||||
.IR telnetd ,
|
.TF anonymous
|
||||||
there are three types of login:
|
|
||||||
.TF anonymo
|
|
||||||
.TP
|
.TP
|
||||||
.I normal
|
.I normal
|
||||||
Normal users authenticate
|
Normal users authenticate with their username and password when using tls.
|
||||||
via the same challenge/response as for
|
|
||||||
.IR telnetd .
|
|
||||||
.BI /usr/ username /lib/namespace.ftp
|
.BI /usr/ username /lib/namespace.ftp
|
||||||
or, if that file does not exist,
|
or, if that file does not exist,
|
||||||
.B /lib/namespace
|
.B /lib/namespace
|
||||||
defines the namespace.
|
defines the namespace.
|
||||||
.TP
|
.TP
|
||||||
.I noworld
|
|
||||||
Users in group
|
|
||||||
.B noworld
|
|
||||||
in
|
|
||||||
.B /adm/users
|
|
||||||
login using a password in the clear.
|
|
||||||
.B /lib/namespace.noworld
|
|
||||||
defines the namespace.
|
|
||||||
.TP
|
|
||||||
.I anonymous
|
.I anonymous
|
||||||
Users
|
Users
|
||||||
.B anonymous
|
.B anonymous
|
||||||
|
@ -150,9 +140,7 @@ The argument to the
|
||||||
option (default
|
option (default
|
||||||
.IR /lib/namespace.ftp )
|
.IR /lib/namespace.ftp )
|
||||||
defines the namespace.
|
defines the namespace.
|
||||||
Anonymous users may only store files in the subtree
|
Anonymous users may not store files.
|
||||||
below
|
|
||||||
.BR /incoming .
|
|
||||||
.PD
|
.PD
|
||||||
.PP
|
.PP
|
||||||
.IR Ftpd 's
|
.IR Ftpd 's
|
||||||
|
@ -167,23 +155,18 @@ allow
|
||||||
anonymous access
|
anonymous access
|
||||||
.TP
|
.TP
|
||||||
.B d
|
.B d
|
||||||
write debugging output to standard error
|
write debugging output to the log
|
||||||
.TP
|
.TP
|
||||||
.B e
|
.B e
|
||||||
treat any user as anonymous
|
treat any user as anonymous
|
||||||
.TP
|
.TP
|
||||||
|
.B c
|
||||||
|
the certificate to use for serving ftps. The key must be stored in factotum.
|
||||||
|
.TP
|
||||||
.B n
|
.B n
|
||||||
the namespace for anonymous users (default
|
the namespace for anonymous users (default
|
||||||
.BR /lib/namespace.ftp )
|
.BR /lib/namespace.ftp )
|
||||||
.PP
|
.PP
|
||||||
To preserve intended protections in shared file trees,
|
|
||||||
any directory containing a file
|
|
||||||
.I .httplogin
|
|
||||||
is locked by
|
|
||||||
.IR ftpd;
|
|
||||||
see
|
|
||||||
.IR httpd (8).
|
|
||||||
.PP
|
|
||||||
.I Socksd
|
.I Socksd
|
||||||
is a SOCKS4 and SOCKS5
|
is a SOCKS4 and SOCKS5
|
||||||
proxy server allowing non Plan9 machines to access the
|
proxy server allowing non Plan9 machines to access the
|
||||||
|
|
File diff suppressed because it is too large
Load diff
Loading…
Reference in a new issue