Date: 27 Nov 1997 23:35:08 +0100 From: joda@pdc.kth.se (Johan Danielsson) To: shimon@simon-shapiro.org Cc: "Jordan K. Hubbard" <jkh@time.cdrom.com>, freebsd-security@freebsd.org, warpy <warpy@suburbia.com.au>, "Daniel O'Callaghan" <danny@panda.hilink.com.au>, Craig Spannring <cts@cdsnet.net> Subject: Re: Possible problem with ftpd 6.00 Message-ID: <xofhg8y7yoz.fsf@blubb.pdc.kth.se> In-Reply-To: Simon Shapiro's message of Thu, 27 Nov 1997 12:22:50 -0800 (PST) References: <XFMail.971127122250.shimon@simon-shapiro.org>
next in thread | previous in thread | raw e-mail | index | archive | help
--Multipart_Thu_Nov_27_23:35:08_1997-1 Content-Type: text/plain; charset=US-ASCII Simon Shapiro <shimon@simon-shapiro.org> writes: > if ( strncmp(login, "ftp, MAX_LOGIN) && > strncmp(login "anonymous", MAX_LOGIN) ) { > printf("Password; ") > } else { > printf("Your E-Mail Address, please "); > } The problem is that the client can't know that it's the email address it should send. I did something like the following, (from ftp.c[login]), which makes it more obvious to the user. /Johan --Multipart_Thu_Nov_27_23:35:08_1997-1 Content-Type: text/plain; charset=US-ASCII if (n == CONTINUE) { if(auth_complete) pass = myname; else if (pass == NULL) { char prompt[128]; if(myname && (!strcmp(user, "ftp") || !strcmp(user, "anonymous"))){ snprintf(defaultpass, sizeof(defaultpass), "%s@%s", myname, mydomain); snprintf(prompt, sizeof(prompt), "Password (%s): ", defaultpass); }else{ strcpy(defaultpass, ""); snprintf(prompt, sizeof(prompt), "Password: "); } pass = defaultpass; des_read_pw_string (tmp, sizeof(tmp), prompt, 0); if(tmp[0]) pass = tmp; } n = command("PASS %s", pass); } --Multipart_Thu_Nov_27_23:35:08_1997-1--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?xofhg8y7yoz.fsf>