Package: curl
Version: 7.16.4-1
Severity: normal

The following transcript demonstrates the problem.  Initially, curl
works fine.  After activating no_anon_password, which causes vsftpd to
refrain from prompting for a (useless) password for the "anonymous"
user, curl starts giving an error.

    $ curl ftp://ftp/
    drwxr-xr-x    7 ftp      ftp          4096 Jul 23 12:40 Preferences
    drwxr-xr-x    3 ftp      ftp          4096 Aug 02 23:22 empc
    drwxr-xr-x    3 ftp      ftp          4096 Aug 02 23:22 scheme-lookup
    drwxr-xr-x    4 ftp      ftp          4096 Aug 02 23:22 sticky-repl
    drwxr-xr-x    2 ftp      ftp          4096 Aug 03 02:47 tmp
    drwxr-xr-x    3 ftp      ftp          4096 Jul 19 13:08 words
    $ ssh -t ftp sudo -u sashroot -i
    Stand-alone shell (version 3.7)
    > cat /etc/debian_version
    4.0
    > egrep -v '^ *(#|$)' /etc/vsftpd.conf
    anonymous_enable=YES
    connect_from_port_20=YES
    dirmessage_enable=YES
    hide_ids=YES
    listen=YES
    xferlog_enable=YES
    anon_max_rate=20000
    pam_service_name=vsftpd
    rsa_cert_file=/etc/ssl/certs/vsftpd.pem
    secure_chroot_dir=/var/run/vsftpd
    > echo no_anon_password=YES >>/etc/vsftpd.conf
    > invoke-rc.d vsftpd restart
    Restarting FTP server: vsftpd.
    > Connection to ftp closed.
    $ curl ftp://ftp/
    curl: (67) Access denied: 500
    $ 

I also note that curl works correctly even after setting
no_anon_password on the server itself, running curl version
7.15.5-1etch1.

-- System Information:
Debian Release: lenny/sid
  APT prefers unstable
  APT policy: (990, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.22-1-amd64 (SMP w/1 CPU core)
Locale: LANG=en_AU.utf8, LC_CTYPE=en_AU.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages curl depends on:
ii  libc6                   2.6-5            GNU C Library: Shared libraries
ii  libcurl3                7.16.4-1         Multi-protocol file transfer libra
ii  libkrb53                1.6.dfsg.1-6     MIT Kerberos runtime libraries
ii  zlib1g                  1:1.2.3.3.dfsg-5 compression library - runtime

curl recommends no packages.

-- no debconf information


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to