Re: anonymous ftp

[Jacek Trzcinski <jacek at certum dot pl>]

Hi !

User jacek is only member of group users.
You were right as far as passwd file. For anonymous user I created in
directory /home/ftp new directory
etc where I placed passwd and group from my /etc directory. After
logging as anonymous user rights were displayed OK ( user root , group
root). Unfortunately , main problem is actual. I stll can delete as a
anonymous all files and directories from /home/ftp which after chroot is
/ for anonymous.

Here is my group file:


root:S-1-5-32-544:0:
Wszyscy:S-1-1-0:0:
SYSTEM:S-1-5-18:18:
Brak:S-1-5-21-1309239993-2107901829-782984527-513:513:
Administratorzy:S-1-5-32-544:544:
Operatorzy kopii zapasowych:S-1-5-32-551:551:
Replikator:S-1-5-32-552:552:
guests:S-1-5-21-1309239993-2107901829-782984527-1008:1008:
users:S-1-5-21-1309239993-2107901829-782984527-1007:1007:
users advanced:S-1-5-21-1309239993-2107901829-782984527-1009:1009:


What concers this "magic" uid 100 and group 10 it is taken fro example
given by DJ Delorie
in "Cygwin User's Guide"

Jacek

Corinna Vinschen wrote:
> 
> On Thu, Mar 29, 2001 at 10:25:30AM +0200, Jacek Trzcinski wrote:
> > Hi !
> > I have just testing setting anonymous ftp under cygwin. I have few
> > remarks
> > 1) My "ftp" user has to posses the same uid as user "guest" but gid may
> > be any. if uid is not equal
> >    to "guest" uid then error "can not set uid" appeared under ftp
> > client. In description concerning ftp
> >    daemon there was example where ftp user had uid=100 and gid=10. It of
> > course does not work at me.
> >    Where is mistake ?
> 
> Sorry, I don't understand your description.
> 
> > 2) Rights problem. I utilize in my system "ntsec" switch. When I'm
> > logging via ftp to my cygwin ftp daemon as for example user "jacek" ,
> > rights to files and directories displaying by "ls -al" seem to look OK.
> > If locally being "root" I set owner as "root" and group as "root" to any
> > file or directory , ls for ftp user "jacek" displays it but... even if
> > only user "root" has right to write to any file and directory and "root"
> > is its owner , I can as a user "jacek" via ftp to delete this file or
> > directory !!!
> 
> Is your user `jacek' member of the administrators group?
> 
> > If I'm logging to my ftpd daemon as a "anonymous" user then "ls -al"
> > shows that owner of the file is not "root" but "guest" !!! and group is
> > not "root" but "Administ". Without any problem I can delete
> > anything !!!. Where are errors ?
> 
> anonymous ftp does work in a chroot environment. If you don't duplicate
> the /etc/passwd file to /home/ftp/etc/passwd, Cygwin can't determine
> the user info correctly. I'm not quite sure why it may delete everything.
> Does it have ownership and write access to it's own home dir?
> 
> > Here I show my passwd file
> 
> I'm missing /etc/group. It's not that important but it sometimes
> helps to analyze the situation.
> 
> Corinna
> 
> >
> > root::0:0:root for
> > cygwin,U-Administrator,S-1-5-21-1309239993-2107901829-782984527-500:/home/root:/bin/bash
> > SYSTEM:*:18:18:,S-1-5-18::
> > Administratorzy:*:544:544:,S-1-5-32-544::
> > Administrator::500:513:,S-1-5-21-1309239993-2107901829-782984527-500:/home/Administrator:/bin/false
> > guest::501:513:,S-1-5-21-1309239993-2107901829-782984527-501:/home/guest:/bin/false
> > IUSR_JNTPRACA::1010:513:Konto Internet
> > Guest,S-1-5-21-1309239993-2107901829-782984527-1010:/home/IUSR_JNTPRACA:/bin/false
> > jacek::1004:513:Jacek
> > TrzciDski,S-1-5-21-1309239993-2107901829-782984527-1004:/home/jacek:/bin/bash
> > ftp::501:10:anonymous ftp for
> > cygwin,U-guest,S-1-5-21-1309239993-2107901829-782984527-501:/home/ftp:/bin/bash
> >
> >
> > Thanks in advance
> > Jacek
> >
> > --
> > Want to unsubscribe from this list?
> > Check out: http://cygwin.com/ml/#unsubscribe-simple
> 
> --
> Corinna Vinschen                  Please, send mails regarding Cygwin to
> Cygwin Developer                                mailto:cygwin@cygwin.com
> Red Hat, Inc.
> 
> --
> Want to unsubscribe from this list?
> Check out: http://cygwin.com/ml/#unsubscribe-simple

--
Want to unsubscribe from this list?
Check out: http://cygwin.com/ml/#unsubscribe-simple