This is the NOTES file -- part of the unofficial enhanced version of WU-FTPD 2.4 maintained by Academ Consulting Services as a public service to the Internet. Comments about any of this distribution are welcome to . ----------------------------------------------------------------------------- It is STRONGLY recommended that you read chapters on running an FTP archive in the O'Reilly Book "Managing Internet Information Services" by Liu, Peek, Jones, Buus and Nye (ISBN 1-56592-062-7) for details on configuration of this ftp server. This distribution has been tailored to match up as closely as possible with the server documentation in Chapter 5 and 6 of this book. Any differences are noted in this file. ----------------------------------------------------------------------------- There are two FAQ (Frequently Asked Questions) posting that you may wish to consult as well. The first is maintained (at the time of this writing) by Perry Rovers and is called " Anonymous FTP: Frequently Asked Questions (FAQ) List". It is a general introdution to FTP from a novice perspective. The second is maintained by Christopher Klaus and is called "Security: Anonymous FTP FAQ" and contains a good overview of setting up an secure anonymous ftp server (including specific information about setting up wu-ftpd). All FAQ are posted periodically to the Usenet newsgroup "news.answers" and are available via anonyous ftp from rtfm.mit.edu in the /pub/usenet/news.answers directory. Look for the first faq in the ftp-list directory under the name "faq". Look for the second faq in the computer-security directory under the name "anonymous-ftp-faq". For those of you with browers the URLs are: ftp://rtfm.mit.edu/pub/usenet/news.answers/ftp-list/faq ftp://rtfm.mit.edu/pub/usenet/news.answers/computer-security/anonymous-ftp-faq ------------------------ Differences between "Managing Internet Information Services" Chapter 5 and Chapter 6 and this distribution are in this section. Section 5.1 says that "build bsd" will build an ftp server for BSDI. This is no longer true. To build for BSDI/OS, use "./build bdi" instead. There is also a specific setup for FreeBSD which can be used by entering "./build fbs". Section 5.2 says that the -a option is the default. This is no longer true. To make use of the ftpacess file, you must provide this option on the command line. The -A option is now the default. This makes wu-ftpd act more like the standard ftp damon by default. It also prevents folks from accidentally making use of the ftpaccess file provided as an example without first reviewing the contents of that file. Section 5.5 says that ftp and anonymous are seen as being different names by the server. This is no longer true. ------------------------ Michael Brennen notes that FIXES-2.4-HOBBIT suggests that the -lskey option should be in LFLAGS. He found that it should be in LIBES. ------------------------ How to make wu-ftpd use shadow passwords on a older (a.out) Linux system. [ Note: on ELF Linux systems it is not necessary to link with libshadow.a - /usr/include/shadow.h and getspnam() are in the standard libc-5.x. You only need to define SHADOW_PASSWORD in config.h. The same wu-ftpd binary should work with both shadow and non-shadow passwords. The change from crypt() to pw_encrypt() is only necessary if you are using DOUBLESIZE passwords (not recommended because of a known weakness). -- Marek Michalkiewicz ] First : - Get the shadow.h from the latest shadow package. - After building the shadow package, you have a libshadow.a. - Build wu-ftpd the normal way, so it is configured for Linux. Then : - Copy shadow.h to the src dir. - Copy libshadow.a to the support dir. - Edit src/config.h to say '#define SHADOW_PASSWORD' instead of #undef. - Edit the LIBES line in src/Makefile to read : LIBES = -lsupport -lbsd -lshadow And then modify src/ftpd.c in line 1061 to read : xpasswd = pw_encrypt(passwd, salt); Finally: - Rebuild wu-ftpd ------------------------ $Id: NOTES,v 1.7 1997/01/14 22:44:59 sob Exp $