Date: 27 Nov 1997 23:35:08 +0100 From: joda@pdc.kth.se (Johan Danielsson) To: shimon@simon-shapiro.org Cc: "Jordan K. Hubbard" <jkh@time.cdrom.com>, freebsd-security@freebsd.org, warpy <warpy@suburbia.com.au>, "Daniel O'Callaghan" <danny@panda.hilink.com.au>, Craig Spannring <cts@cdsnet.net> Subject: Re: Possible problem with ftpd 6.00 Message-ID: <xofhg8y7yoz.fsf@blubb.pdc.kth.se> In-Reply-To: Simon Shapiro's message of Thu, 27 Nov 1997 12:22:50 -0800 (PST) References: <XFMail.971127122250.shimon@simon-shapiro.org>
next in thread | previous in thread | raw e-mail | index | archive | help
--Multipart_Thu_Nov_27_23:35:08_1997-1
Content-Type: text/plain; charset=US-ASCII
Simon Shapiro <shimon@simon-shapiro.org> writes:
> if ( strncmp(login, "ftp, MAX_LOGIN) &&
> strncmp(login "anonymous", MAX_LOGIN) ) {
> printf("Password; ")
> } else {
> printf("Your E-Mail Address, please ");
> }
The problem is that the client can't know that it's the email address
it should send. I did something like the following, (from
ftp.c[login]), which makes it more obvious to the user.
/Johan
--Multipart_Thu_Nov_27_23:35:08_1997-1
Content-Type: text/plain; charset=US-ASCII
if (n == CONTINUE) {
if(auth_complete)
pass = myname;
else if (pass == NULL) {
char prompt[128];
if(myname &&
(!strcmp(user, "ftp") || !strcmp(user, "anonymous"))){
snprintf(defaultpass, sizeof(defaultpass), "%s@%s", myname, mydomain);
snprintf(prompt, sizeof(prompt), "Password (%s): ", defaultpass);
}else{
strcpy(defaultpass, "");
snprintf(prompt, sizeof(prompt), "Password: ");
}
pass = defaultpass;
des_read_pw_string (tmp, sizeof(tmp), prompt, 0);
if(tmp[0])
pass = tmp;
}
n = command("PASS %s", pass);
}
--Multipart_Thu_Nov_27_23:35:08_1997-1--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?xofhg8y7yoz.fsf>