[Zope] mc-ftp crashes zope

[Andreas Jung]

On Sat, Jan 12, 2002 at 04:16:02PM +0100, Nicola Larosa wrote:
>  > Is this behaviour reproducable?
> 
> Not deterministically, it only happens sometimes, cannot isolate a sequence
> of actions that make it happen predictably.
> 
> 
>  > Any core dumps
> 
> None in /var/zope/var, where else should I look for them?
> 
> 
>  > or entries in the stupid logfile?
> 
> Is that the Z2.log file, or do I need to enable it some other way?
> 
> 
> I tried now, it did not crash, I put in a wrong password, but the Z2.log
> file says so:
> 
> 127.0.0.13205 ==> 220 altair FTP server (Medusa Async V1.17.16.2
> [experimental]) ready.
> 127.0.0.13205 <== USER admin
> 127.0.0.13205 ==> 331 Password required.
> 127.0.0.13205 <== PASS <password>
> 127.0.0.13205 ==> 230 Login successful.
> 127.0.0.13205 <== PWD
> 127.0.0.13205 ==> 257 "/" is the current directory.
> 127.0.0.13205 <== PASV
> 127.0.0.13205 ==> 227 Entering Passive Mode (127,0,0,1,12,134)
> 127.0.0.13205 <== TYPE A
> 127.0.0.13205 ==> 200 Type set to ASCII.
> 127.0.0.13205 <== LIST -la /.
> 127.0.0.13205 ==> 530 Unauthorized.
> 127.0.0.13205 <== CWD /
> 127.0.0.13205 ==> 530 Unauthorized.
> 127.0.0.13205 <== CWD /
> 127.0.0.13205 ==> 530 Unauthorized.
> 127.0.0.13205 <== CWD /
> 127.0.0.13205 ==> 530 Unauthorized.
> 127.0.0.13205 <== CWD /
> 127.0.0.13205 ==> 530 Unauthorized.
 

Initial logins are *always* successful. The security checks are performed for
every single command as "ls" in your example. This explains why you receive Unauthorized.

Andreas