home *** CD-ROM | disk | FTP | other *** search
- Path: sparky!uunet!spool.mu.edu!agate!ucbvax!FTP.COM!jbvb
- From: jbvb@FTP.COM ("James B. Van Bokkelen")
- Newsgroups: comp.protocols.tcp-ip.ibmpc
- Subject: Re: Wattcp -> Silicon Graphics: (solution + questions)
- Message-ID: <9212281806.AA25950@ftp.com>
- Date: 28 Dec 92 18:06:05 GMT
- Sender: daemon@ucbvax.BERKELEY.EDU
- Reply-To: jbvb@ftp.com
- Distribution: world
- Organization: The Internet
- Lines: 20
-
-
- .... In the meantime however it would be nice to have the pc end ftp
- agent not insist on a password unless the remote site asks for one. I
- haven't dug out the relevant rfc yet but I would hope there is some kind
- of feedback... perhaps an agreed "password string empty" message rather
- than a "no password required".
-
- RFC 959 says that the client must depend on the server's response to the USER
- command: If the server replies with a 2xx code, then no password is required
- and the client shouldn't ask for one. If the server replies "331...", then
- the client *must* prompt for a password. 4bsd-derived Unix FTP servers
- afflicted with this bug don't notice that there's no password and send the
- "331..." response anyway. Furthermore, they expect a PASS command next, so
- the client can't get anywhere even if it violates the protocol. Either get
- the vendor to fix the server, or put a password on the account. There's no
- other way.
-
- James B. VanBokkelen 2 High St., North Andover, MA 01845
- FTP Software Inc. voice: (508) 685-4000 fax: (508) 794-4488
-
-