Content-Type: text/plain
Content-Disposition: inline
Content-Transfer-Encoding: binary
MIME-Version: 1.0
X-Mailer: MIME-tools 5.411 (Entity 5.404)
X-RT-Original-Encoding: iso-8859-1
Content-Length: 2137

From benjid@media.teamnet.net  Wed Oct 15 15:08:17 1997
Received: from MIT.EDU (PACIFIC-CARRIER-ANNEX.MIT.EDU [18.69.0.28]) by rt-11.MIT.EDU (8.7.5/8.7.3) with SMTP id PAA28203 for <bugs@RT-11.MIT.EDU>; Wed, 15 Oct 1997 15:08:17 -0400
Received: from media.teamnet.net by MIT.EDU with SMTP
	id AA28821; Wed, 15 Oct 97 15:08:12 EDT
Received: (from benjid@localhost)
	by media.teamnet.net (8.8.6/8.8.6) id OAA24682;
	Wed, 15 Oct 1997 14:08:14 -0500 (CDT)
Message-Id: <199710151908.OAA24682@media.teamnet.net>
Date: Wed, 15 Oct 1997 14:08:14 -0500 (CDT)
From: benjid@teamnet.net
Reply-To: benjid@teamnet.net
To: krb5-bugs@MIT.EDU
Subject: Change requests to kerberos ftpd 
X-Send-Pr-Version: 3.99

>Number:         481
>Category:       krb5-appl
>Synopsis:       Change requests to kerberos ftpd
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    gjking
>State:          analyzed
>Class:          change-request
>Submitter-Id:   unknown
>Arrival-Date:   Wed Oct 15 15:09:00 EDT 1997
>Last-Modified:  Tue Oct 06 04:44:02 EDT 1998
>Originator:     Ben Dehner
>Organization:
		Team Technologies
>Release:        1.0pl1
>Environment:
	
System: IRIX media 6.2 03131015 IP22


>Description:

	(The following suggestions are based on the behavior of the
	SGI IRIX ftp daemon; I find them both very useful.)

	Kerberos ftpd does not support "restricted" ftp users.  These
	are users that are listed in the "/etc/ftpusers" file, along
	with the keyword "restrict".  The "restrict" keyword tells ftpd
	(or some ftpds, anyway) that the user is allowed access, but that
	ftpd is to do a chroot to this user's home directory before 
	allowing access.  Kerberos ftpd only supports "chroot" for the 
	specific case of anonymous ftp user.

	Kerberos ftpd also does not support extended loggin ("-ll" option)
	which logs all file transfer commands (get, put, etc.) as well
	as mkdir, delete and rename commands.  These are very useful for
	the case where more than one user has write file access.

>How-To-Repeat:
	
>Fix:
	
>Audit-Trail:
>Unformatted:
	Kerberos ftpd does not support restricted login or extended logging