From owner-freebsd-security Sun Aug 5 18:14:16 2001 Delivered-To: freebsd-security@freebsd.org Received: from blinx.net (ns2.blinx.net [205.205.72.1]) by hub.freebsd.org (Postfix) with SMTP id 5C02137B405 for ; Sun, 5 Aug 2001 18:14:12 -0700 (PDT) (envelope-from wacky@blinx.net) Received: (qmail 38209 invoked from network); 6 Aug 2001 01:11:54 -0000 Received: from ce3021279-a.montvlle1.ct.home.com (HELO home) (@24.180.62.220) by www.blinx.net with SMTP; 6 Aug 2001 01:11:54 -0000 Message-ID: <003d01c11e14$0b90c220$0700a8c0@com.home.com> From: "Mike" To: "FreeBSD-SECURITY" References: <20010730192031.M59043-100000@epsilon.lucida.ca> Subject: Ftpd problem Date: Sun, 5 Aug 2001 21:06:37 -0400 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 5.50.4522.1200 X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4522.1200 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Hi, I'm running FreeBSD 4.3-STABLE as a web server. Recently we have been having a problem with ftpd. The user trys to login and when it asks for a password it says login incorrect. The /etc/shells are correct with his account and he is not listed in /etc/ftpusers. But he can also login via ssh2. But if root changes his password then it will work. It's only after the user changes his password after a certain amount of days. I do not see anything in /etc/login.conf that could be causing this problem. Does anybody know what might be?. I am e-mailing this because I believe its security related. -Mike ----- Original Message ----- From: "Matt Heckaman" To: "FreeBSD-SECURITY" Sent: Monday, July 30, 2001 7:22 PM Subject: Re: FreeBSD Security Advisory FreeBSD-SA-01:51.openssl > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > [ not cc'd to Kris since I know he's on this list :) ] > > On Mon, 30 Jul 2001, FreeBSD Security Advisories wrote: > ... > : # cd /usr/src/ > : # patch -p < /path/to/patch > : # cd /usr/src/lib/libcrypto/ > ^^^^^^^^^^^^^^^^^^^^^^^ > Shouldn't this be /usr/src/secure/lib/libcrypto ? At least that is where > it's located on my 4.3-STABLE machine of April 21 2001. > > * Matt Heckaman - mailto:matt@LUCIDA.CA http://www.lucida.ca/gpg * > * GPG fingerprint - 53CA 8320 C8F6 32ED 9DDF 036E 3171 C093 4AD3 1364 * > > The Universe is run by the complex interweaving of three elements: > energy, matter, and enlightened self-interest. > -- G'Kar, "Survivors" > > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.0.6 (FreeBSD) > Comment: http://www.lucida.ca/gpg > > iD8DBQE7ZewxMXHAk0rTE2QRAtXMAJ9i5ughcdoKD8Pw1V31eOY3n5Z66wCeIyak > 3XgSgXYtipGBKf1z7tgOwmw= > =Z0+U > -----END PGP SIGNATURE----- > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-security" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message