>
>modified how?  
>
>NCSA has 3 HP workstations running on HP-UX... running wu-ftp 2.4 ... all 
>files served from AFS. 
>
>I installed the normal ftp server, and pointed the home directory to somewhere
>in AFS land. 


Yeah, that's what I've done here and so far, mostly good.

--BUT--

First, while it seems to do a good job providing an anonymous ftp server,
it doesn't work if someone wants to ftp in with their own username/password
and access their home directory.  Since it doesn't authenticate to AFS,
there is no token (unless they first telnet and klog).

Second, there is a security concern that Rick Cochran has pointed out
here before.  If you happen to login to the ftp server as root, do a klog,
and leave a token owned by root laying around, all anonymous ftp users
will have access to that token until it expires (or you unlog it)!

I've found a pointer to an AFS-aware WUarchive FTPd on the AFS Reference
Page at http://www.contrib.andrew.cmu.edu:8001/usr/db74/afs.html  but
haven't checked it out yet.  Hope to soon.  Hopefully it does the right
thing.  If you get to it first, how about a report?

Reply via email to