Tony Su changed bug 929559
What Removed Added
Flags needinfo?(tonysu@su-networking.com)  

Comment # 2 on bug 929559 from
No,

The FTP app with its long history has always maintained its own application
level database of Users that can login and access files using the FTP protocol,
unrelated to any other database of Users.

YAST introduced the idea of permitting access to Users with Local System
accounts. While an interesting idea for private access within a very small
group or company, this is unworkable for traditional Internet use where you
don't want every FTP User to also have local login access to the machine. The
way the YAST FTP Server applet works now is very different than how FTP apps
are supposed to be configured with minor upside (easy auto use of an available
database of Users) but a major security downside (Usual FTP users should not
have local logon access).

This is of course different than Anonymous access where the User is not
individually identifiable..


You are receiving this mail because: