ftp bug report V3.4

["Neal Miskin" <nealm@tesl.com>]

>Submitter-Id: net

>Originator: root

>Organization:

net

>Synopsis: FTP failing when more than one FTP user logged in

>Severity: serious

>Priority: high

>Category: user

>Class: sw-bug

>Release: Version 6.5/OpenBSD

>Environment:

System : OpenBSD 3.4

Architecture: OpenBSD.i386

Machine : i386 HP Vectra VE

>Description:

We have installed OpenBSD on a pc , which we are using as our ftp
server. The only pkg installed is bash-2.05b-static

Here is how ftp is configured in inetd.conf:

ftp stream tcp nowait root /usr/libexec/ftpd ftpd -llUSA

Here is the ftp users info from /etc/passwd: user1:*:1012:10:user1 ftp
account , Empty , Empty:/home/ftpusers/user1:/usr/bin/false

user2:*:1013:10:user2 ftp account , Empty ,
Empty:/home/ftpusers/user2:/usr/bin/false

1) No ftp users are using the FTP server.

2) Then user1 ftp's onto the server and he can use all the ftp commands
ie ls , put ,get.

3) If user2 ftp's onto the server, while user1 is still logged in, and
uses the ftp commands ie ls , put ,get the following error message
appears after about 30 seconds:

ftp> ls

200 PORT command successful.

425 Can't create data socket (192.168.65.151,20): Address already in
use.

ftp>

3) Then the same error message appears when user1 tries to use the same
ftp commands.

>How-To-Repeat:

To reproduce the problem we simply use the procedure as shown above. We
have tried using other ftp users with the same results.

>Fix:

If we use the command "quote pasv" before using an ftp command then the
ftp command will work. An example is given below:

ftp> quote pasv

227 Entering Passive Mode (192,168,65,151,208,198)

ftp> ls

200 PORT command successful.

150 Opening ASCII mode data connection for 'file list'. PACK.ZIP 226
Transfer complete. 283 bytes received in 0.026 seconds (10.73 Kbytes/s)

ftp>

End of Report



=========

Neal Miskin

Product Specialist

Perseus Support Services Ltd



Tel : 01926 426101

Fax : 01926 426121

Email : nealm@tesl.com <mailto:nealm@tesl.com>

The information transmitted is intended only for the person or entity to
which it is addressed and may contain confidential and/or privileged
material. Any review, retransmission, dissemination or other use of, or
taking of any action in reliance upon, this information by persons or
entities other than the intended recipient is prohibited. If you
received this in error, please contact the sender and delete the
material from any computer.