[25992] in Athena Bugs
Re: Case 647469: Fetch 4.0.3 no longer works against Athena ftpd
daemon@ATHENA.MIT.EDU (Garry Zacheiss)
Wed Aug 25 17:21:14 2004
Message-Id: <200408252120.i7PLKcNf005648@brad-majors.mit.edu>
To: computing-help@mit.edu
In-Reply-To: Your message of "Wed, 25 Aug 2004 17:00:28 EDT."
<28897001.1093467628316.JavaMail.root@sheep.mit.edu>
Date: Wed, 25 Aug 2004 17:20:38 -0400
From: Garry Zacheiss <zacheiss@mit.edu>
cc: bugs@mit.edu
cc: meeroh@mit.edu
Errors-To: bugs-bounces@mit.edu
As it happens, I was already in touch with Miro about this.
There is a problem with the MIT krb5 1.3.x ftpd that occurs when you
send it a PASS command with no arguments; you can reproduce this from
the command line:
[zacheiss@brad-majors] ~$ ftp ftp.dialup.mit.edu
Connected to mass-toolpike.mit.edu.
220 mass-toolpike.mit.edu FTP server (Version 5.60) ready.
334 Using authentication type GSSAPI; ADAT must follow
GSSAPI accepted as authentication type
GSSAPI authentication succeeded
200 Data channel protection level set to private.
Name (ftp.dialup.mit.edu:zacheiss):
331 GSSAPI user zacheiss@ATHENA.MIT.EDU is authorized as zacheiss;
Password required.
Password:
Unauthenticated reply received from server:
In the above exchange, I hit return at both the username and password
prompts, after which it hangs. If I Control-C, I see:
^CPassword for zacheiss@ATHENA.MIT.EDU:
421 Service not available, remote server has closed connection
Login failed.
No control connection for command: Interrupted system call
ftp>
The problem is libkrb5 prompting someplace where it formerly didn't.
As Miro pointed out later in his Casetracker case, this only affects
Fetch + KClient, not GSS, so it isn't exactly urgent; there's also a
Fetch bug that causes it to crash reliably for me after a successful
KClient ftp login, so I'm not sure many people were using Fetch and
KClient before.
I know the correct fix for ftpd and plan to fix it soon, but am not
making it a high priority.
Garry