Topic: Beta - FTP login (1 of 7), Read 68 times
Conf: VEDIT Beta Test
From: Richard Kramer
Date: Wednesday, April 12, 2006 04:12 PM

The files to be edited are on a FreeBSD machine, on a local LAN, in a directory that is owned by login "demo", and which has rwx permissions. When I try to connect with login "demo" and password "1111", an alert pops up with the message:
MS error code: 12014
Message: The password was not allowed

I can log in as "demo" OK using another FTP application, and can log in as "richard" using vedit.

Looking at /var/log/messages on the FreeBSD machine, I can see "FTP LOGIN FAILED FROM RRK2, demo" RRK2 is tthe WinXP machine. So it looks like the password is getting mangled, maybe. How do I fix this?

Richard

 


Topic: Beta - FTP login (2 of 7), Read 63 times
Conf: VEDIT Beta Test
From: Richard Kramer
Date: Wednesday, April 12, 2006 04:31 PM

It seems that the problem arises when the length of the password is even. For example, "12345" works from vedit, but "1234" and "123456" do not. And yes, for each of the tests, the FreeBSD password was changed.

Richard

 


Topic: Re: Beta - FTP login (3 of 7), Read 64 times
Conf: VEDIT Beta Test
From: Ted Green
Date: Wednesday, April 12, 2006 05:17 PM

At 04:31 PM 4/12/2006, you wrote:
>From: "Richard Kramer"
>
>It seems that the problem arises when the length of the password is even. For example, "12345" works from vedit, but "1234" and "123456" do not. And yes, for each of the tests, the FreeBSD password was changed.

I have forwarded your problem to Tom, who is working on other FTP issues. Assuming he can replicate it, we should have it fixed by next week.

Ted.

 


Topic: Beta - FTP login (4 of 7), Read 61 times
Conf: VEDIT Beta Test
From: John H
Date: Thursday, April 13, 2006 10:11 AM

On Wed, 12 Apr 2006 17:18:04 -0400 GMT, Ted Green wrote:

> At 04:31 PM 4/12/2006, you wrote:
>>From: "Richard Kramer"
>>
>>It seems that the problem arises when the length of the password
>>is even. For example, "12345" works from vedit, but "1234" and
>>"123456" do not. And yes, for each of the tests, the FreeBSD
>>password was changed.

> I have forwarded your problem to Tom, who is working on other FTP
> issues. Assuming he can replicate it, we should have it fixed by
> next week.

> Ted.

I just wanted to suggest, in case there are length limits for FTP
login parms, that they be long.

I generally use maximum length allowed per OS or FTP daemon (despite
any RFCs regarding this) for ftp and other passwords. In a nutshell,
it would be nice if there wasn't any validation of character or
length in VEDIT for FTP login and PW if possible.

--
John

 


Topic: Re: Beta - FTP login (5 of 7), Read 60 times
Conf: VEDIT Beta Test
From: Ted Green
Date: Thursday, April 13, 2006 12:27 PM

At 10:12 AM 4/13/2006, you wrote:
>I just wanted to suggest, in case there are length limits for FTP
>login parms, that they be long.
>
>I generally use maximum length allowed per OS or FTP daemon (despite
>any RFCs regarding this) for ftp and other passwords. In a nutshell,
>it would be nice if there wasn't any validation of character or
>length in VEDIT for FTP login and PW if possible.

I don't know what the RFCs specify, but we will have an upper limit on the password length, perhaps 64.

We are trying to avoid password character limitations, but this is difficult to even test as most (all?) FTP implementations have limitations.

Ted.

 


Topic: Beta - FTP login (6 of 7), Read 65 times
Conf: VEDIT Beta Test
From: John H
Date: Wednesday, April 19, 2006 08:14 AM

On Thu, 13 Apr 2006 12:28:34 -0400 GMT, Ted Green wrote:

> At 10:12 AM 4/13/2006, you wrote:
>>I just wanted to suggest, in case there are length limits for FTP
>>login parms, that they be long.
>>
>>I generally use maximum length allowed per OS or FTP daemon (despite
>>any RFCs regarding this) for ftp and other passwords. In a nutshell,
>>it would be nice if there wasn't any validation of character or
>>length in VEDIT for FTP login and PW if possible.

> I don't know what the RFCs specify, but we will have an upper
> limit on the password length, perhaps 64.

> We are trying to avoid password character limitations, but this is
> difficult to even test as most (all?) FTP implementations have
> limitations.

> Ted.

That sounds good. I'm not sure if there are any RFC about this. :)

Mainly wanted to sound off about this in case of very limiting
'rules' had somehow many there way into the user/pw code.

Wish I could make more time to help beta test. I've frequently had
to live out of a suitcase for the past 8-10 months because of
travels.

John



--
John

 


Topic: Re: Beta - FTP login (7 of 7), Read 76 times
Conf: VEDIT Beta Test
From: Ted Green
Date: Wednesday, April 19, 2006 10:42 AM

At 08:14 AM 4/19/2006, you wrote:
>That sounds good. I'm not sure if there are any RFC about this. :)
>
>Mainly wanted to sound off about this in case of very limiting
>'rules' had somehow many there way into the user/pw code.

John:

No limitations; there was simply an error in the way we were encrypting/decrypting the password.

Ted.