Skip to main content

Posts

vsftp: anomymous can upload but not download

This bug seems to be here from a long time. Even if a patch exists, the bug is still here in the most recent version. Here is the resolution (I assume gcc is installed): Stop your vsftpd daemon: service vsftpd stop Download the lastest source package (vsftpd-2.0.5 so far) from http://vsftpd.beasts.org . gunzip and untar # gunzip vsftpd-2.0.5.tar.gz # tar xf vsftpd-2.0.5.tar # cd vsftpd-2.0.5 A couple of files must be changed postlogin.c , line 1831 Replace ... if (p_sess->is_anonymous && tunable_chown_uploads) { vsf_sysutil_fchmod(new_file_fd, 0600); if (tunable_one_process_model) { ... by ... if (p_sess->is_anonymous && tunable_chown_uploads) { vsf_sysutil_fchmod(new_file_fd, (0666 & ~tunable_anon_umask)); if (tunable_one_process_model) { ... tunable.c , line 129,130 Replace /* -rw-rw-rw- */ unsigned int tunable_file_open_mode = 0666; by /* -rw------- */ unsigned int tunable_file_open_mode = 0600; builddefs.c , line 9 Replace ...

Linux and LDAP

The goal of this document is to explain how delegating the authentication mecanism for my Linux servers on a LDAP directory. Like many of you, our architecture also includes an Windows Active Directory server for the Windows workstation. To avoid having passwords both in AD and LDAP, they are only owned by AD; LDAP only have extra-info (groups user belongs to, and so on). This curious architecture is due to the fact our AD server belongs to a forest we don't manage. In turn, we have full control on the LDAP server. The main drawback of this specific architecture is to split identification and authentication; one is done on LDAP, the other on AD. Ok, now let's open the hood ... Every user must have a posixAccount object class. This object class contains the Unix specific information. You could use several tools to create this object class; personaly, I do it with simple openldap commands, wrapped in a small script: # ldapmodify -W -x -v -h $LDAP -D $CRED -a -f /tmp/posixAccount...

New York, New York

July 29th, 30th and 31st, I paid a fully touristic visit to one of the craziest Nnorth-american city: New York. The tour was mainly located in Manhattan, but we also went to Brooklin and Staten Island. Harlem (where I had a chance to meet Franco The Great), the Fifth avenue, Time Square, Central Park, the Empire State Building, Grand Central, Ground Zero, Wall Street, Greenwich Village, and of course, the Statue of Liberty. And some other places I forgot the name. A first glance on the Big Apple, but not the last ...

Helicopter flight

Friday the 29th, I had an appointment at Helicraft for what is called an fam-flight: half an hour where the basic concepts of the helicopter flight are explained, and half an hour with the flight itself. The apparel was a Robinson R22 . During the flight, you have the opportunity to use the controls: the anti-torque pedals, the collective pitch control and the cyclic control. Even if this was not my first helicopter flight, this one might change some things in my life...

What's on my iPod today?

"Un dimanche à Bamako" by Amadou et Mariam. Manu Chao' shadow floats over this album. Great! "Nerve net" by Brian Eno. "Dummy" by Portishead. "Future Primitive" by Intermix. "Decksandrumsandrockandroll" by Propellerhead.

Solaris: metainit: No such file or directory

# metainit -f d200 -m d100 metainit: srmtl104: d200: No such file or directory The explanation is in kernel parameters: # grep nmd /kernel/drv/md.conf name="md" parent="pseudo" nmd=128 md_nsets=4; nmd limits pseudo-device names to 128. You may change this, wich implies a boot -r, or limit yourself to pseudo-device names within the range. # metainit -f d127 -m d100 d127: Mirror is setup #