./net/tnftpd, The NetBSD FTP Daemon

[ CVSweb ] [ Homepage ] [ RSS ] [ Required by ] [ Add to tracker ]


Branch: pkgsrc-2008Q3, Version: 20081009, Package name: tnftpd-20081009, Maintainer: lukem

tnftpd is the a server for the Internet File Transfer Protocol (ftp).
The server uses the TCP protocol and listens on the port specified in
the ``ftp'' service specification; see services(5).

`tnftpd' is a portable version of the NetBSD ftpd, hence the name.
It was formerly known as `lukemftpd'.

Various features such as the ftpd.conf(5) functionality, RFC 2389, and
draft-ietf-ftpext-mlst-11 support was implemented in NetBSD 1.3 and
later releases by Luke Mewburn <lukem@NetBSD.org>.

tnftpd provides around 90% of the functionality of wuftpd, but in
approximately 30% of the footprint.



Package options: inet6

Master sites:

SHA1: 60d00e431576c7cda75613d39820ffb97c30135d
RMD160: 3fc31849159baaffc86e097b3f4e1bfdda3a9476
Filesize: 238.727 KB

Version history: (Expand)


CVS history: (Expand)


   2008-10-09 13:50:35 by Matthias Scheler | Files touched by this commit (5) | Package updated
Log message:
Pullup ticket #2549 - requested by lukem
tnftpd: security update

Revisions pulled up:
- net/tnftpd/Makefile		1.18
- net/tnftpd/PLIST		1.3
- net/tnftpd/distinfo		1.10
- net/tnftpd/options.mk		1.2
- net/tnftpd/patches/patch-aa	delete
---
Module Name:	pkgsrc
Committed By:	lukem
Date:		Thu Oct  9 04:14:29 UTC 2008

Modified Files:
	pkgsrc/net/tnftpd: Makefile PLIST distinfo options.mk
Removed Files:
	pkgsrc/net/tnftpd/patches: patch-aa

Log message:
Update to tnftpd 20081009.  Notable changes since 20061217:

* Don't split large commands into multiple commands; just fail on them.
  This prevents cross-site request forgery (CSRF)-like attacks,
  when a web browser is used to access an ftp server.
* Enhance -C to support an optional @host ('-C user[@host]'):
  checks whether user as connecting from host would be granted
  access by ftpusers(5).
* Support IPv6 in the host directive of ftpusers(5).
* Implement -n to disable hostname lookups.

* Disable SOCKS support; I don't have the ability to test it,
  and the autoconf checks were very out of date.
* Add configure --with-pam to enable PAM authentication support.
  Defaults to checking for PAM.
* Add configure --with-skey to enable S/Key authentication support.
  Incompatible with --with-pam, defaults to no.
* Fix pathnames in the installed manual pages to contain
  the appropriate $(prefix) substitution.
* Use fcntl(3) locking instead of flock(3) or lockf(3).
* Various other portability improvements.