PDA

View Full Version : sitebot exclusion from implicit ssl


efoplistiz
10-26-2004, 10:16 PM
Hi,

im using the beta5-8-5r registered version and i have a problem excluding the sitebot or any user from implicit ssl. i tried the solution in the kb:

Require_Encrypted_Auth = !-sitebot *

but it doesnt work. the rest of the configuration is:

Require_Encrypted_Data = !* (whether this is on or off, the sitebot cant connect)
Certificate_Name = x.x.x.x (ip)
Explicit_Encryption = False
Encryption_Protocol = SSL3
Min_Cipher_Strength = 128
Max_Cipher_Strength = 128

When i try from an ftp client to connect normally (without implicit ssl) it doenst connect, but when i use implicit it works normally (So it isnt a problem with the certificate or the sitebot account).

what am i doing wrong here ?

thanx for your help in advance

darko
10-27-2004, 06:39 AM
use a flag:

ioFTPD.ini:
Require_Encrypted_Auth = !S *

site CHANGE sitebot flags +S

efoplistiz
10-27-2004, 09:21 AM
hi again

i tried to use a flag, so the bot now is 1S, and still it cannot login without ssl

neoxed
10-27-2004, 03:08 PM
The option Require_Encrypted_Auth only works for explicit SSL, obviously. Since in implicit mode, the SSL negotiation occurs when connecting, whereas explicit only negotiates after "AUTH SSL/TLS". Simply put, there is no way to exclude a user/group/etc. from implicit SSL since all connections must be secure.

You could easily create a second FTP service without implicit SSL and restrict it only to that user.

[FTP_Service]
Type = FTP
Device_Name = Any
Port = 1234
Description = My FTP Service
User_Limit = 10
Allowed_Users = *
Messages = ..\text\ftp

### Encryption
Require_Encrypted_Auth = !*
Require_Encrypted_Data = !*
Certificate_Name = 192.168.1.10
Explicit_Encryption = True
Encryption_Protocol = TLS
Min_Cipher_Strength = 128
Max_Cipher_Strength = 256

[FTP_Service_Bot]
Type = FTP
Device_Name = Any
Port = 12345
Description = My FTP Service
User_Limit = 10
Allowed_Users = -sitebot
Messages = ..\text\ftp

[Network]
Active_Services = FTP_Service FTP_Service_Bot ...

efoplistiz
10-27-2004, 03:36 PM
i set it up and it works PERFECTLY

thank you very much for helping!