1.\" Copyright (c) 1985, 1988, 1991, 1993
2.\" The Regents of the University of California. All rights reserved.
3.\"
4.\" Redistribution and use in source and binary forms, with or without
5.\" modification, are permitted provided that the following conditions
6.\" are met:
7.\" 1. Redistributions of source code must retain the above copyright
8.\" notice, this list of conditions and the following disclaimer.
--- 16 unchanged lines hidden (view full) ---
25.\" DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
26.\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
27.\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
28.\" LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
29.\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
30.\" SUCH DAMAGE.
31.\"
32.\" @(#)ftpd.8 8.2 (Berkeley) 4/19/94
33.\" $FreeBSD: head/libexec/ftpd/ftpd.8 99500 2002-07-06 19:19:48Z charnier $
34.\"
35.Dd January 27, 2000
36.Dt FTPD 8
37.Os
38.Sh NAME
39.Nm ftpd
40.Nd Internet File Transfer Protocol server
41.Sh SYNOPSIS
42.Nm
43.Op Fl 46ADEMORSUdro
44.Op Fl l Op Fl l
45.Op Fl T Ar maxtimeout
46.Op Fl a Ar address
47.Op Fl p Ar file
48.Op Fl t Ar timeout
49.Sh DESCRIPTION
50The
51.Nm
52utility is the
53Internet File Transfer Protocol
54server process. The server uses the
55.Tn TCP
56protocol
57and listens at the port specified in the
58.Dq ftp
59service specification; see
60.Xr services 5 .
--- 216 unchanged lines hidden (view full) ---
277command is preceded by a Telnet "Interrupt Process" (IP)
278signal and a Telnet "Synch" signal in the command Telnet stream,
279as described in Internet RFC 959.
280If a
281STAT
282command is received during a data transfer, preceded by a Telnet IP
283and Synch, transfer status will be returned.
284.Pp
285The
286.Nm
287utility interprets file names according to the
288.Dq globbing
289conventions used by
290.Xr csh 1 .
291This allows users to utilize the metacharacters
292.Dq Li \&*?[]{}~ .
293.Pp
294The
295.Nm
296utility authenticates users according to six rules.
297.Pp
298.Bl -enum -offset indent
299.It
300The login name must be in the password data base
301and not have a null password.
302In this case a password must be provided by the client before any
303file operations may be performed.
304If the user has an S/Key key, the response from a successful USER
--- 76 unchanged lines hidden (view full) ---
381Make this directory owned by
382.Dq root
383and unwritable by anyone (mode 555).
384The files pwd.db (see
385.Xr passwd 5 )
386and
387.Xr group 5
388must be present for the
389.Xr ls 1
390command to be able to produce owner names rather than numbers.
391The password field in
392.Xr passwd
393is not used, and should not contain real passwords.
394The file
395.Pa ftpmotd ,
396if present, will be printed after a successful login.
397These files should be mode 444.
--- 52 unchanged lines hidden (view full) ---
450changes the default for ftp logins to that address.
451The 'user', 'statfile', 'welcome' and 'motd' fields may be left
452blank, or a single hypen '-' used to indicate that the default
453value is to be used.
454.Pp
455As with any anonymous login configuration, due care must be given
456to setup and maintenance to guard against security related problems.
457.Pp
458The
459.Nm
460utility has internal support for handling remote requests to list
461files, and will not execute
462.Pa /bin/ls
463in either a chrooted or non-chrooted environment. The
464.Pa ~/bin/ls
465executable need not be placed into the chrooted tree, nor need the
466.Pa ~/bin
467directory exist.
468.Sh FILES
--- 25 unchanged lines hidden (view full) ---
494to create sockets with privileged port numbers. It maintains
495an effective user id of the logged in user, reverting to
496the super-user only when binding addresses to sockets. The
497possible security holes have been extensively
498scrutinized, but are possibly incomplete.
499.Sh HISTORY
500The
501.Nm
502utility appeared in
503.Bx 4.2 .
504IPv6 support was added in WIDE Hydrangea IPv6 stack kit.
2.\" The Regents of the University of California. All rights reserved.
3.\"
4.\" Redistribution and use in source and binary forms, with or without
5.\" modification, are permitted provided that the following conditions
6.\" are met:
7.\" 1. Redistributions of source code must retain the above copyright
8.\" notice, this list of conditions and the following disclaimer.
--- 16 unchanged lines hidden (view full) ---
25.\" DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
26.\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
27.\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
28.\" LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
29.\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
30.\" SUCH DAMAGE.
31.\"
32.\" @(#)ftpd.8 8.2 (Berkeley) 4/19/94
33.\" $FreeBSD: head/libexec/ftpd/ftpd.8 99500 2002-07-06 19:19:48Z charnier $
34.\"
35.Dd January 27, 2000
36.Dt FTPD 8
37.Os
38.Sh NAME
39.Nm ftpd
40.Nd Internet File Transfer Protocol server
41.Sh SYNOPSIS
42.Nm
43.Op Fl 46ADEMORSUdro
44.Op Fl l Op Fl l
45.Op Fl T Ar maxtimeout
46.Op Fl a Ar address
47.Op Fl p Ar file
48.Op Fl t Ar timeout
49.Sh DESCRIPTION
50The
51.Nm
52utility is the
53Internet File Transfer Protocol
54server process. The server uses the
55.Tn TCP
56protocol
57and listens at the port specified in the
58.Dq ftp
59service specification; see
60.Xr services 5 .
--- 216 unchanged lines hidden (view full) ---
277command is preceded by a Telnet "Interrupt Process" (IP)
278signal and a Telnet "Synch" signal in the command Telnet stream,
279as described in Internet RFC 959.
280If a
281STAT
282command is received during a data transfer, preceded by a Telnet IP
283and Synch, transfer status will be returned.
284.Pp
285The
286.Nm
287utility interprets file names according to the
288.Dq globbing
289conventions used by
290.Xr csh 1 .
291This allows users to utilize the metacharacters
292.Dq Li \&*?[]{}~ .
293.Pp
294The
295.Nm
296utility authenticates users according to six rules.
297.Pp
298.Bl -enum -offset indent
299.It
300The login name must be in the password data base
301and not have a null password.
302In this case a password must be provided by the client before any
303file operations may be performed.
304If the user has an S/Key key, the response from a successful USER
--- 76 unchanged lines hidden (view full) ---
381Make this directory owned by
382.Dq root
383and unwritable by anyone (mode 555).
384The files pwd.db (see
385.Xr passwd 5 )
386and
387.Xr group 5
388must be present for the
389.Xr ls 1
390command to be able to produce owner names rather than numbers.
391The password field in
392.Xr passwd
393is not used, and should not contain real passwords.
394The file
395.Pa ftpmotd ,
396if present, will be printed after a successful login.
397These files should be mode 444.
--- 52 unchanged lines hidden (view full) ---
450changes the default for ftp logins to that address.
451The 'user', 'statfile', 'welcome' and 'motd' fields may be left
452blank, or a single hypen '-' used to indicate that the default
453value is to be used.
454.Pp
455As with any anonymous login configuration, due care must be given
456to setup and maintenance to guard against security related problems.
457.Pp
458The
459.Nm
460utility has internal support for handling remote requests to list
461files, and will not execute
462.Pa /bin/ls
463in either a chrooted or non-chrooted environment. The
464.Pa ~/bin/ls
465executable need not be placed into the chrooted tree, nor need the
466.Pa ~/bin
467directory exist.
468.Sh FILES
--- 25 unchanged lines hidden (view full) ---
494to create sockets with privileged port numbers. It maintains
495an effective user id of the logged in user, reverting to
496the super-user only when binding addresses to sockets. The
497possible security holes have been extensively
498scrutinized, but are possibly incomplete.
499.Sh HISTORY
500The
501.Nm
502utility appeared in
503.Bx 4.2 .
504IPv6 support was added in WIDE Hydrangea IPv6 stack kit.