Security alert! (ProFTPD)

[yonatanp]

worked perfectly on CentOS 4.4 dual xeon machine.

 

[nobaloney]

cd /usr/local/directadmin/customapache/
wget ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.1rc2.tar.gz
tar xzf proftpd-1.3.1rc2.tar.gz
rm -rf proftpd-1.3.1rc2.tar.gz
cd proftpd-1.3.1rc2
./configure --prefix=/usr --sysconfdir=/etc --localstatedir=/var/run --with-modules=mod_ratio:mod_readme:mod_tls
make
make install
perl -pi -e "s/^AuthPAM on/#AuthPAM on/g" /etc/proftpd.conf 
/etc/rc.d/init.d/proftpd restart

Not working for me on some CentOS 3.9 servers. Problem appears to be with version of SSL: I get this when doing make:

In file included from /usr/include/openssl/ssl.h:179,
                 from ../include/mod_tls.h:34,
                 from mod_tls.c:39:
/usr/include/openssl/kssl.h:72:18: krb5.h: No such file or directory

and then a bunch of errors until it fails.

So I tried it without the :mod_tls at the end of the configure command, and it worked but gave me this error on restart:

Starting proftpd:  - Fatal: unknown configuration directive 'DisplayFirstChdir' on line 45 of '/etc/proftpd.conf'[/code
so I commented out that line from the /etc/proftpd.conf file.

It started properly.  I'm testing now and will post again when tests are completed.

Jeff

 

[nobaloney]

I tested it with both virtual and real ftp users, on both owned and shared IP#s.

It works. It logs in properly for each.

Jeff

 

[yonatanp]

I tested it with both virtual and real ftp users, on both owned and shared IP#s.

It works. It logs in properly for each.

Jeff

lol talk about bumping and old thread!
i just got an email about this thread reply

Im using latest proftpd from source on centos 5.5 atm , works great!
minor version 3.3c
( with TLS )

 

[nobaloney]

Yes, it's an old thread, and perhaps I should have started a new one.

This error occurred when trying to install 1.3.3c on CentOS 3.9. I'm working now on a testbed, but I can't just update to a later version of CentOS for this client.

So I guess the real question is how do I install with TLS on this machine? What else do I need to update from source?

Thanks!

Jeff