giampaolo
unix_ftpd.py shouldn't check password provided for the anonymous user
From [email protected] on April 21, 2009 02:08:16
anonymous is a user which typically does no require authentication.
The client can supply any password and the server is supposed to not verify
that supplied username and password match the stored credentials.
This is true for the dummy authorizer but not for the unix authorizer which
currently attempts to verify password supplied for the anonymous user
making the unix_ftp.py script unusable with anonymous user.
Original issue: http://code.google.com/p/pyftpdlib/issues/detail?id=113
From [email protected] on April 20, 2009 17:08:26
Summary: unix_ftpd.py shouldn't check password provided for the anonymous user
From [email protected] on September 13, 2009 14:01:52
This is now fixed and included as part of 0.5.2 version.
stills says anonymous user password is wrong tried both anonymous & Anonymous
Following scenario +++++++++++++++++++++++ -on server run unix_ftpd.py or python -m pyftpdlib -w -on client windows terminal run
cmd.exe /c "@echo open [server_ip] 2121>ftp11.txt&@echo USER Anonymous>>ftp11.txt&@echo PASS [email protected]>>ftp11.txt&@echo binary>>ftp11.txt&@echo GET /nc.exe>>ftp11.txt&@echo quit>>ftp11.txt&@ftp -s:ftp11.txt -v" ++++++++++++++++++++++++++++++++++++++ ERRROR +++++++++++++++ Connected to 10.10.15.61. open 10.10.15.61 2121 220 pyftpdlib based ftpd ready. User (10.10.15.61:(none)): 331 Username ok, send password.
530 Authentication failed. Login failed. binary 530 Log in with USER and PASS first. GET /MS14-058.exe 530 Log in with USER and PASS first. 530 Log in with USER and PASS first. quit 221 Goodbye. ++++++++++++++++++++++++++
