diff options
Diffstat (limited to 'crypto/heimdal/appl/ftp/ftpd/ftpd.cat8')
| -rw-r--r-- | crypto/heimdal/appl/ftp/ftpd/ftpd.cat8 | 61 |
1 files changed, 32 insertions, 29 deletions
diff --git a/crypto/heimdal/appl/ftp/ftpd/ftpd.cat8 b/crypto/heimdal/appl/ftp/ftpd/ftpd.cat8 index d4af02e71cc1..b47920fbfb5d 100644 --- a/crypto/heimdal/appl/ftp/ftpd/ftpd.cat8 +++ b/crypto/heimdal/appl/ftp/ftpd/ftpd.cat8 @@ -1,12 +1,12 @@ - -FTPD(8) UNIX System Manager's Manual FTPD(8) +FTPD(8) FreeBSD System Manager's Manual FTPD(8) NNAAMMEE ffttppdd - Internet File Transfer Protocol server SSYYNNOOPPSSIISS - ffttppdd [--aa _a_u_t_h_m_o_d_e] [--ddiillvv] [--gg _u_m_a_s_k] [--pp _p_o_r_t] [--TT _m_a_x_t_i_m_e_o_u_t] [--tt - _t_i_m_e_o_u_t] [--uu _d_e_f_a_u_l_t _u_m_a_s_k] [--BB | ----bbuuiillttiinn--llss] [----ggoooodd--cchhaarrss==_s_t_r_i_n_g] + ffttppdd [--aa _a_u_t_h_m_o_d_e] [--ddiillvvUU] [--gg _u_m_a_s_k] [--pp _p_o_r_t] [--TT _m_a_x_t_i_m_e_o_u_t] + [--tt _t_i_m_e_o_u_t] [--uu _d_e_f_a_u_l_t _u_m_a_s_k] [--BB | ----bbuuiillttiinn--llss] + [----ggoooodd--cchhaarrss==_s_t_r_i_n_g] DDEESSCCRRIIPPTTIIOONN FFttppdd is the Internet File Transfer Protocol server process. The server @@ -18,7 +18,8 @@ DDEESSCCRRIIPPTTIIOONN --aa Select the level of authentication required. Kerberised login can not be turned off. The default is to only allow kerberised login. Other possibilities can be turned on by giving a string - of comma separated flags as argument to --aa. Recognised flags are: + of comma separated flags as argument to --aa. Recognised flags + are: _p_l_a_i_n Allow logging in with plaintext password. The password can be a(n) OTP or an ordinary password. @@ -27,8 +28,8 @@ DDEESSCCRRIIPPTTIIOONN _f_t_p Allow anonymous login. - The following combination modes exists for backwards compatibili- - ty: + The following combination modes exists for backwards compatibil- + ity: _n_o_n_e Same as _p_l_a_i_n_,_f_t_p. @@ -56,12 +57,17 @@ DDEESSCCRRIIPPTTIIOONN period allowed may be set to _t_i_m_e_o_u_t seconds with the --TT option. The default limit is 2 hours. - --tt The inactivity timeout period is set to _t_i_m_e_o_u_t seconds (the de- - fault is 15 minutes). + --tt The inactivity timeout period is set to _t_i_m_e_o_u_t seconds (the + default is 15 minutes). --uu Set the initial umask to something else than the default 027. - + --UU In previous versions of ffttppdd, when a passive mode client + requested a data connection to the server, the server would use + data ports in the range 1024..4999. Now, by default, if the sys- + tem supports the IP_PORTRANGE socket option, the server will use + data ports in the range 49152..65535. Specifying this option + will revert to the old behavior. --vv Verbose mode. @@ -71,8 +77,8 @@ DDEESSCCRRIIPPTTIIOONN ----ggoooodd--cchhaarrss==_s_t_r_i_n_g allowed anonymous upload filename chars - The file _/_e_t_c_/_n_o_l_o_g_i_n can be used to disable ftp access. If the file ex- - ists, ffttppdd displays it and exits. If the file _/_e_t_c_/_f_t_p_w_e_l_c_o_m_e exists, + The file _/_e_t_c_/_n_o_l_o_g_i_n can be used to disable ftp access. If the file + exists, ffttppdd displays it and exits. If the file _/_e_t_c_/_f_t_p_w_e_l_c_o_m_e exists, ffttppdd prints it before issuing the ``ready'' message. If the file _/_e_t_c_/_m_o_t_d exists, ffttppdd prints it after a successful login. @@ -127,8 +133,6 @@ DDEESSCCRRIIPPTTIIOONN PROT data channel protection level PBSZ protection buffer size MIC integrity protected command - - CONF confidentiality protected command ENC privacy protected command CCC clear command channel @@ -163,8 +167,8 @@ DDEESSCCRRIIPPTTIIOONN FFttppdd authenticates users according to these rules. 1. If Kerberos authentication is used, the user must pass valid - tickets and the principal must be allowed to login as the re- - mote user. + tickets and the principal must be allowed to login as the + remote user. 2. The login name must be in the password data base, and not have a null password (if kerberos is used the password field is not @@ -173,8 +177,8 @@ DDEESSCCRRIIPPTTIIOONN user has an OTP key, the response from a successful USER com- mand will include an OTP challenge. The client may choose to respond with a PASS command giving either a standard password - or an OTP one-time password. The server will automatically de- - termine which type of password it has been given and attempt + or an OTP one-time password. The server will automatically + determine which type of password it has been given and attempt to authenticate accordingly. See otp(1) for more information on OTP authentication. @@ -200,8 +204,8 @@ DDEESSCCRRIIPPTTIIOONN In the last case, ffttppdd takes special measures to restrict the client's access privileges. The server performs a chroot(2) to the home directory of the ``ftp'' user. In order that system security is not breached, it - is recommended that the ``ftp'' subtree be constructed with care, consid- - er following these guidelines for anonymous ftp. + is recommended that the ``ftp'' subtree be constructed with care, con- + sider following these guidelines for anonymous ftp. In general all files should be owned by ``root'', and have non-write per- missions (644 or 755 depending on the kind of file). No files should be @@ -227,7 +231,7 @@ DDEESSCCRRIIPPTTIIOONN _._g_z. gtar Enables retrieval of whole directories as - files ending in _._t_a_r. Can also be combined + files ending in _._t_a_r. Can also be combined with compression. You must use GNU Tar (or some other that supports the --zz and --ZZ flags). @@ -249,9 +253,9 @@ DDEESSCCRRIIPPTTIIOONN _~_f_t_p_/_p_u_b Traditional place to put whatever you want to make pub- lic. - If you want guests to be able to upload files, create a _~_f_t_p_/_i_n_c_o_m_i_n_g di- - rectory owned by ``root'', and group ``ftp'' with mode 730 (make sure - ``ftp'' is member of group ``ftp''). The following restrictions apply to + If you want guests to be able to upload files, create a _~_f_t_p_/_i_n_c_o_m_i_n_g + directory owned by ``root'', and group ``ftp'' with mode 730 (make sure + ``ftp'' is member of group ``ftp''). The following restrictions apply to anonymous users: ++oo Directories created will have mode 700. @@ -260,12 +264,11 @@ DDEESSCCRRIIPPTTIIOONN with the --gg option. ++oo These command are not accessible: DDEELLEE, RRMMDD, RRNNTTOO, RRNNFFRR, SSIITTEE UUMMAASSKK, - and SSIITTEE CCHHMMOODD. ++oo Filenames must start with an alpha-numeric character, and consist of - alpha-numeric characters or any of the following: + (plus), - (mi- - nus), = (equal), _ (underscore), . (period), and , (comma). + alpha-numeric characters or any of the following: + (plus), - + (minus), = (equal), _ (underscore), . (period), and , (comma). FFIILLEESS /etc/ftpusers Access list for users. @@ -276,7 +279,7 @@ FFIILLEESS ~/.klogin Login access for Kerberos. SSEEEE AALLSSOO - ftp(1), otp(1), getusershell(3), ftpusers(5), syslogd(8), + ftp(1), otp(1), getusershell(3), ftpusers(5), syslogd(8) SSTTAANNDDAARRDDSS RRFFCC 995599 FTP PROTOCOL SPECIFICATION @@ -293,4 +296,4 @@ BBUUGGSS HHIISSTTOORRYY The ffttppdd command appeared in 4.2BSD. -4.2 Berkeley Distribution April 19, 1997 5 +4.2 Berkeley Distribution April 19, 1997 4.2 Berkeley Distribution |