what is "AUTH GSSAPI"?

  • Follow


Hi,

I noticed some PCs will send out "AUTH GSSAPI" when trying to ftp to a
ftp server, but some other PCs will not.

All of these PCs are linux, ubuntu or fedora.

I want to know which module will affect this behavior? how to disable/
enable sending of this command?

Thanks for any responses.
0
Reply Hans 10/1/2010 7:08:31 PM

On Fri, 01 Oct 2010 15:08:31 -0400, Hans <hansyin@gmail.com> wrote:

> I noticed some PCs will send out "AUTH GSSAPI" when trying to ftp to a
> ftp server, but some other PCs will not.
> I want to know which module will affect this behavior? how to disable/
> enable sending of this command?

 From "man ftp" ...

  -u Restrains ftp from attempting ``auto-authentication'' upon  initial  connection.
     If  auto-authentication  is  enabled,  ftp  attempts  to authenticate to the FTP
     server by sending the AUTH command, using  whichever  authentication  types  are
     locally  supported.   Once an authentication type is accepted, an authentication
     protocol will proceed by issuing ADAT commands.  This option also disables auto-
     login.

Regards, Dave Hodgins

-- 
Change nomail.afraid.org to ody.ca to reply by email.
(nomail.afraid.org has been set up specifically for
use in usenet. Feel free to use it yourself.)
0
Reply dwhodgins (363) 10/1/2010 8:17:35 PM


Hi, thanks for the response.
I checked my ftp in both fedora and ubuntu machines but cannot find -u
option.  Are you running a different kind of linux?

How can I do this in my ubuntu and fedora machines?

Rgds,


Hans
On Oct 1, 1:17=A0pm, "David W. Hodgins" <dwhodg...@nomail.afraid.org>
wrote:
> On Fri, 01 Oct 2010 15:08:31 -0400, Hans <hans...@gmail.com> wrote:
> > I noticed some PCs will send out "AUTH GSSAPI" when trying to ftp to a
> > ftp server, but some other PCs will not.
> > I want to know which module will affect this behavior? how to disable/
> > enable sending of this command?
>
> =A0From "man ftp" ...
>
> =A0 -u Restrains ftp from attempting ``auto-authentication'' upon =A0init=
ial =A0connection.
> =A0 =A0 =A0If =A0auto-authentication =A0is =A0enabled, =A0ftp =A0attempts=
 =A0to authenticate to the FTP
> =A0 =A0 =A0server by sending the AUTH command, using =A0whichever =A0auth=
entication =A0types =A0are
> =A0 =A0 =A0locally =A0supported. =A0 Once an authentication type is accep=
ted, an authentication
> =A0 =A0 =A0protocol will proceed by issuing ADAT commands. =A0This option=
 also disables auto-
> =A0 =A0 =A0login.
>
> Regards, Dave Hodgins
>
> --
> Change nomail.afraid.org to ody.ca to reply by email.
> (nomail.afraid.org has been set up specifically for
> use in usenet. Feel free to use it yourself.)

0
Reply hansyin (84) 10/1/2010 11:00:13 PM

Hans wrote:
> Hi, thanks for the response.
> I checked my ftp in both fedora and ubuntu machines but cannot find -u
> option.  Are you running a different kind of linux?
> 

Must be. Debian

~$ ftp -u
ftp: u: unknown option
0
Reply The 10/1/2010 11:18:38 PM

On Fri, 01 Oct 2010 19:00:13 -0400, Hans <hansyin@gmail.com> wrote:

> Hi, thanks for the response.
> I checked my ftp in both fedora and ubuntu machines but cannot find -u
> option.  Are you running a different kind of linux?

$ rpm -q -f `which ftp`
krb5-appl-clients-1.0-4mdv2010.1

$ rpm -q -i krb5-appl-clients|grep Summary
Summary     : Kerberos-aware telnet, ftp, rcp, rsh and rlogin clients

$ cat /etc/release
Mandriva Linux release 2010.1 (Official) for i586

> How can I do this in my ubuntu and fedora machines?

If the version of ftp installed there is not Kerberos aware, it won't
have the -u option, and will not be sending the AUTH commands.

As I'm usually using non kerberos ftp servers, I've set up an alias
"alias ftp='ftp -u'".  If I am using a local kerberos aware ftp
server, I enter "\ftp", to bypass the alias.

$ urpmf bin/ftp$
krb5-appl-clients:/usr/bin/ftp
lukemftp:/usr/bin/ftp
heimdal-ftp:/usr/bin/ftp

Checking "urpmq -i lukemftp heimdal-ftp" shows they both include
authentication support too, so it doesn't look like Mandriva has
a version of ftp available, that doesn't include it, although
they probably use different switches to disable it.  Check the
ftp man page on your system, to see if there is some other option
to disable it.

Regards, Dave Hodgins

-- 
Change nomail.afraid.org to ody.ca to reply by email.
(nomail.afraid.org has been set up specifically for
use in usenet. Feel free to use it yourself.)
0
Reply dwhodgins (363) 10/2/2010 2:02:55 AM

4 Replies
590 Views

(page loaded in 0.065 seconds)

Similiar Articles:













7/26/2012 9:14:42 AM


Reply: