NetNews Usenet Archive 1992 #27/NN_1992_27.iso/spool/alt/security/4850

Internet Message Format | 1992-11-23 | 1.3 KB

Path: sparky!uunet!dove!ariel.ncsl.nist.gov!wack
From: [e-mail] (John Wack)
Newsgroups: alt.security
Subject: help: modifying ftpd
Message-ID: <[e-mail]>
Date: 23 Nov 92 15:01:51 GMT
Sender: [e-mail]
Distribution: na
Organization: National Institute of Standards & Technology
Lines: 23


We're using challenge/response s/w and cards for access to our SunOS
system - for all logins.  Basically, after the username/password,
you get a prompt for the challenge.

Now I'd like to add this to our ftp daemon.  The problem I'm running
into is mostly that I can't figure out exactly how to add the
additional prompts to ftpd - what I'd like to do is, if the user is
not anonymous, add a "Challenge: 120ej032" message immediately after
the user/password stuff, followed by a "Response:" prompt with the
smarts to read the response from the terminal.

I tried a few things but then realized that ftpd uses a lot of messy
routines to parse commands and responses - in the interests of time
and my limited ability, I'm wondering if anyone out there has done
anything similar to a BSD-based ftpd and can give me a few pointers.
It seems as if I need to add a new command/response sequence to ftpd
as opposed to a few printfs and fgets. We're using the ftpd from wustl
if that helps.

Any pointers appreciated,
John Wack