[comp.sys.apollo] Anonymous ftp/password encryption

holtz@zonker.cascade.carleton.ca (Neal Holtz) (03/14/91)

I have been trying to use the version of ftpd, supplied by sls@ocf.berekeley.edu,
that supports anonymous FTP.  That part works fine, except that now
anonymous FTP is the type that works.

The registries on the SR10.2 node were created from the 9.7 registry
using cvtrgy.

It seems that the encrypted password in /etc/passwd does not match
the password encrypted by crypt(), thus preventing users from "logging
in" via ftpd.

Is this a known problem, or am I misunderstanding the problem?
Is there anything I can do about it?

--
Prof. Neal Holtz,  Dept. of Civil Eng.,  Carleton University,  Ottawa, Canada
Internet: holtz@civeng.carleton.ca   Tel: (613)788-5797    Fax: (613)788-3951

pcc@apollo.HP.COM (Peter Craine) (03/16/91)

In article <1991Mar14.143214.11758@ccs.carleton.ca>,
holtz@zonker.cascade.carleton.ca (Neal Holtz) writes:
|> 
|> The registries on the SR10.2 node were created from the 9.7 registry
|> using cvtrgy.
|> 
|> It seems that the encrypted password in /etc/passwd does not match
|> the password encrypted by crypt(), thus preventing users from "logging
|> in" via ftpd.
|> 
|> Is this a known problem, or am I misunderstanding the problem?
|> Is there anything I can do about it?
|> 
|> --

Ah yes.  When a password is created and stored in an SR10 registry, the
encryption is, effectively, done by crypt(), so the normal comparison
techniques work fine.  However, SR9 did not use this encryption technique.
The SR10 registry can understand SR9-ish encryption, so when you cvtrgy,
the password will still be SR9-style encryption.

Your only hope (that I know of, anyway) is to have your master registy on
SR10, and do cvtrgy -from9to10's to get the info down to the SR9 side.

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
    Peter Craine                +  "Agent Cooper, I am thrilled to pieces that
    Hewlett-Packard             +    the Dharma came to Hohoho, I really am."
    Chelmsford Response Center  +  *I* don't want my opinions.  Why would HP?

wjw@ebe.eb.ele.tue.nl (Willem Jan Withagen) (03/16/91)

In article <1991Mar14.143214.11758@ccs.carleton.ca> holtz@zonker.cascade.carleton.ca (Neal Holtz) writes:
=>
=>I have been trying to use the version of ftpd, supplied by sls@ocf.berekeley.edu,
=>that supports anonymous FTP.  That part works fine, except that now
=>anonymous FTP is the type that works.
=>
=>The registries on the SR10.2 node were created from the 9.7 registry
=>using cvtrgy.
=>
=>It seems that the encrypted password in /etc/passwd does not match
=>the password encrypted by crypt(), thus preventing users from "logging
=>in" via ftpd.
=>
=>Is this a known problem, or am I misunderstanding the problem?
It is not known as such, but the 9.7 passwd-entries contain a non-sr10
compatible crypted passwd. (I think it is mentioned somewhere in
	"making the transition to sr10"

The fix is rather simple. Expire all user passwds, upon login are they
required to supply a new one, which then is crypted in new format.
So next time an ftp-session is started, then access is allowed.
Ftp was created on sr10, hence it did not give any problems.

Regards,
		Willem Jan Withagen

Eindhoven University of Technology   DomainName:  wjw@eb.ele.tue.nl    
Digital Systems Group, Room EH 10.10 
P.O. 513                             Tel: +31-40-473401
5600 MB Eindhoven                    The Netherlands