pure-ftpd

Posted in Linux by t0ta11ed on Mar 31st, 2007

Pure FTP is a nice alternative to the standard VSFTP daemon that comes with many ‘Nix flavors. It has the ability to authenticate against mysql, ldap, pam, and the passwd file. You can even chain the authentication methods together to check all or some of them if another fails, this is very nifty if you want a little redundancy in your logins. LDAP down? No problem! It’ll just use the next method you have enabled.

By default all configuration options are run at the command line when starting the server, but you can enable it to use a standard configuration file instead. I found it way easier dealing with the server this way. Setting up authentication with mysql was a snap, but of course required separate configuration of the db server to create the database, table, and users. If you want a quick and easy way of setting up users the regular old pam way will work by just creating them on the system.

Pure FTP is basically like vstfpd on steroids to me. The authentication options are nice and I’ll be giving it a try on my AD server at work to see how it goes. Centralizing the FTP logins by using Active Directory is an interesting idea. All in all, it’s a good alternative to my oft used vsftpd. You can find it at pureftpd.org

Access Based Enumeration

Posted in Winblowz by t0ta11ed on Mar 12th, 2007

So um, don’t enable ABE on a file server with files you copied from an old domain and server. Apparently the old file attributes will make certain user files disappear…even if you’ve given them full control..isn’t that fun boys and girls?

Welcome to the new dev.marzopolis.com

Posted in General by t0ta11ed on Mar 10th, 2007

I’ve decided to use this spot to post various stuff, mostly related to my job as a system administrator. Along with the new purpose comes a new look and I think it kicks ass.

Some of the first things I’ll be putting up will be about Exchange 2007, I’ve had some adventures putting it into production the last month. There will also be various other ranting and raving in between all the technobabble as well I imagine. So enjoy…or just click off..