Checking the lftp site, it seems that lftp is perhaps superior to ncftp 
in some ways. 

I wonder though, is it possible to write a wrapper for lftp so that it 
can emulate ncftp?   I'm all for taking the latest improvements from the 
open source community, but I still think it would be "nice" to minimize 
the number of different implementations of what is really the same 
functionality that we have in Solaris.

A couple more questions:

    1) What is the FISH protocol?  (Never heard of it.)

    2) Are there any deficiencies in lftp versus ncftp that would force 
us to retain the ncftp to avoid feature gap?

    3) Given the availability of superior tools (lftp, ncftp), does it 
make sense to obsolete the actual "ftp" command, possibly replacing it 
with a script to call lftp or ncftp?  (This also begs the question about 
whether one or the other of lftp or ncftp are true superset of ftp.  A 
question to which I don't know the answer as I don't really use either 
tool any more.)  (I also realize that this is "not this case", but still 
would like to have the info from the project team.)

    4) I guess the same question could ultimately be raised about sftp 
as well.  Although, see question 5 below.

And one "non-architectural" question (really a CTeam question), but 
still worth knowing the answer to:

    5) Given that lftp supports SFTP, HTTPS, FTPS (all of which are 
"secured protocols", has anyone done any checks in the code for secure 
programming practices?   IMO, its important to ensure this new tool 
can't be used as an attack vector to weaken the security protections 
offered by those secured protocols.  And if this may be used by root 
users (e.g. in automated scripts), then it is also important.

    -- Garrett

Daniel Hain wrote:
> I am sponsoring this case for Martina Tomisova.  Timeout is set for 5/02/2008.
> Man pages and the default configuration file are in the case directory.
>
>
> Template Version: @(#)sac_nextcase 1.66 04/17/08 SMI
> This information is Copyright 2008 Sun Microsystems
> 1. Introduction
>     1.1. Project/Component Working Name:
>        Integrate lftp into Solaris
>     1.2. Name of Document Author/Supplier:
>        Author:  Martina Tomisova
>     1.3  Date of This Document:
>       25 April, 2008
> 4. Technical Description
> Proposal:
>
>         Integrate lftp into Solaris.
>
> Detail:
>
>         LFTP is sophisticated file transfer program with command line
>         interface. It supports FTP, HTTP, FISH, SFTP, HTTPS and FTPS
>         protocols.
>
>         Every operation in lftp is reliable, that is any non-fatal error
>         is handled and the operation is retried automatically.
>
>         LFTP has shell-like command syntax allowing you to launch
>         several commands in parallel in background (&) etc. If you exit
>         lftp when some jobs are not finished yet, lftp will move itself
>         to nohup mode in background. The same happens when you have a
>         real modem hangup or when you close an xterm. LFTP has builtin
>         mirror which can download or update a whole directory tree.
>
>         There is command 'at' to launch a job at specified time in
>         current context, command 'queue' to queue commands for
>         sequential execution for current server, and much more.
>
>         LFTP supports IPv6 for both FTP and HTTP protocols. LFTP
>         supports secure versions of the protocols FTP and HTTP: FTPS
>         (explicit and implicit) and HTTPS.
>
>         The current version of lftp is 3.6.3 at the time of this case.
>
> Deliverables:
>       /etc/lftp.conf
>       /usr/share/man/man1/lftp.1
>       /usr/share/man/man1/lftpget.1
>       /usr/share/lftp/verify-file
>       /usr/share/lftp/import-netscape
>       /usr/share/lftp/import-ncftp
>       /usr/share/lftp/convert-netscape-cookies
>       /usr/bin/lftpget
>       /usr/bin/lftp
>
> Exported Interfaces:
>
>         SUNWlftpr          Uncommitted         Package name
>         SUNWlftpu          Uncommitted         Package name
>         /usr/bin/lftp      Committed           Executable location
>         /usr/bin/lftpget   Committed           Executable location
>         lftp               Uncommitted         Commandline syntax
>         lftpget            Uncommitted         Commandline syntax
>
>
> Imported Interfaces:
>
>         SUNWlexpt          Libraries (libexpat.so.1)
>         SUNWgnutls         Libraries (libgnutls.so.13)
>         SUNWlibgcrypt      Libraries (libgcrypt.so.11)
>         SUNWlibgpg-error   Libraries (libgpg-error.so.0)
>         SUNWlibC           Libraries (libCstd.so.1, libCrun.so.1,
>                                       libCstd_isa.so.1)
>         SUNWlibms          Libraries (libm.so.2)
>         SUNWzlib           Libraries (libz.so.1)
>         SUNWperl584usr     To run scripts (perl)
>         SUNWgzip           Called from scripts (gzip)
>         SUNWbzip           Called from scripts (bzip)
>         SUNWunzip          Called from scripts (unzip)
>         SUNWrpm            Called from scripts (rpm)
>
>
> References:
>
> [1] http://lftp.yar.ru/
>     Author of lftp: Alexander V. Lukyanov
> [2] 6676677 Integrate lftp into Solaris.
>
>
> 6. Resources and Schedule
>     6.4. Steering Committee requested information
>       6.4.1. Consolidation C-team Name:
>               sfw
>     6.5. ARC review type: FastTrack
>     6.6. ARC Exposure: open
>
>   


Reply via email to