Organization: State University of New York at Buffalo
Newsgroups: bit.listserv.ibmtcp-l
Date:         Fri, 17 Apr 1992 06:41:05 EDT
From:         "Steven P. Roder" <TKSSTEVE@UBVM.BITNET>
Subject:      Anonymous FTP mods for 2.2

With permission from the original authors at Columbia University, mods
for Anonymous FTP 2.2 access are now available from UBVM.cc.buffalo.edu.
Here is the doc file from the FTP220 directory:

To accomplish the following requires modifications to FTSCMD and FTSVMSUB.

1) If UserName is ANONYMOU, then ask password as identification to
   keep intruders honest.
2) If UserName is ANONYMOU, then automatically issue a CWD for the
   default directory.
3) Anonymous login gets a longer greeting.  Text defined in FIFOANON
   EXEC.

The original modification (for FTP 1.2, I think) are available from
Columbia University, and also accomplished the following, which I did
not implement here:

1) If UserName is ANONYMOU, then reject all CWD commands to anything
   not belonging to userid * (which is the FTP Server machine), and
   to any minidisk that is not in the range of mincuu and maxcuu.
   Yes, folks, I don't like to allow for fishing expeditions.
2) If UserName is ANONYMOU, disallow ACCT command - no Write access.

My version of the mods requires:
   FTSCMD   UBANON
   FTSCMD   AUXLCL
   FTSVMSUB UBANON
   FTSVMSUB AUXLCL
   FIFOANON EXEC  The text of the Anonymous greeting

Installation:
   Add a TEXT AUXLCL statement to TCPIP CNTRL (before TEXT AUX220)
   VMFPAS FTSCMD TCPIP
   VMFPAS FTSVMSUB TCPIP
   TCPLOAD SRVRFTP TCPIP
   Define the VM user ANONYMOU (example below)
   Customize FIFOANON EXEC and install them on your user visible
        tcp/ip disk (592).
   ReStart the FTP server machine with the ANONYMOU parameter
   Customize user directory entries:
        Set up LINK statement in the directory entries of the accounts
        that you whish to make available via anonymous FTP.  The directory
        link mode should be RR, so that a CD account_name will get read
        access to that users' 191.  For example, to make this disk available,
        the VM userid TCP220 looks like this (CD FTP220):

               USER FTP220 ******
               INCLUDE USERPROF
               ACCOUNT 60 SYSTEMS
               ACIGROUP USRACI
               LINK TCPMAINT A92 191 RR

        and the ANONYMOU user looks like this (CD ANONYMOU, which the
        mods do for you at logon):

               USER ANONYMOU ********
               INCLUDE USERPROF
               ACCOUNT 60 SYSTEMS
               ACIGROUP USRACI
               LINK TCPMAINT A91 191 RR

        and, one final example, the LISTSERV list WPWIN-L (CD WPWIN-L):

               USER WPWIN-L ********
               INCLUDE USERPROF
               ACCOUNT ACS USRSERVE
               ACIGROUP ACSACI
               LINK LISTSERV 460 191 RR

   Allowing the CD to work without having to specify a password can by
        accomplished in a number of ways, the easiest of which is to put
        read passwords of ALL on the minidisks (i.e. TCPMAINT A91, A92,
        and LISTSERV 460 in the above examples).  Another is to allow
        RR links without passwords via a security package like RACF or
        VMSECURE.  We run VMSECURE, so I allow RR links without passwords
        to these minidisks via RULES.  I believe a third way would be to
        modify the RACFLINK EXEC (I think this was done at North Dakota
        State, NDSUVM1)

   If you have any questions or problems, feel free to contact me at:

        tkssteve@ubvm                (bitnet)
        tkssteve@ubvm.cc.buffalo.edu (internet)
        (716)636-3564                (phonenet)

   Or, if you want to get the modification that these are based on, ftp
   to cuvmb.cc.columbia.edu, and get the file $CUANON DOC in directory
   CUTCP.


Steve Roder
(tkssteve@ubvm.bitnet | tkssteve@ubvm.cc.buffalo.edu | (716)636-3564
Comments: Gated by NETNEWS@AUVM.AMERICAN.EDU