>Number: 612 >Category: mod_proxy >Synopsis: Proxy FTP Authentication Fails >Confidential: no >Severity: non-critical >Priority: medium >Responsible: apache (Apache HTTP Project) >State: open >Class: sw-bug >Submitter-Id: apache >Arrival-Date: Fri May 23 14:10:01 1997 >Originator: [EMAIL PROTECTED] >Organization: apache >Release: 1.2b10 >Environment: FreeBSD 2.1.7, no patches, gcc >Description:
ftp://user:[EMAIL PROTECTED] works fine. ftp://[EMAIL PROTECTED] does not work. This URL works with no other proxy server except Netscape Proxy Server (Which throws up a authentication box in the absence of a password. We've tried http-gw, Microsoft, etc. We run Apache for our Web servers, and would LOVE to make it our proxy. However, users really appreciate not having to enter their sensitive passwords in the URL when trying to FTP in their browser. >How-To-Repeat: Sure - just ftp://[EMAIL PROTECTED] in your browser (which of course, is configured to use an Apache proxy server for ftp). >Fix: I've tried modifying proxy_ftp.c and proxy_util.c with no luck whatsoever. (I was kinda hoping is was a security measure that I could simply "remove" and recompile...) :-%2 >Audit-Trail: >Unformatted:
