Bay Networks 5390 Administering page 490

Using Model 5390 Security
Configuring Security for the Model 5390 FTP Daemon
When a new ftp session is initiated, the ftp daemon registers the source host with the who database.
A subsequent who displays:
annex: who
In the above sample command display, because the user has not yet logged into the ftp session, no
user name appears in the User field. If the enable_security parameter is set to Y but a preferred
security server is not configured, or if enable_security is set to N, the user is prompted for a user
name and a password. The Model 5390 server will accept any user name, but grants ftp access only
after checking the password against its administrative password. If the Model 5390 server grants
access, the user's name appears in the who command display.
If the enable_security parameter is set to Y and a preferred security server is configured, the Model
5390 server calls the ppp_security function in the acp_policy.c file with the user's name and
password as entered and the service set to SERVICE_FTP. If ACP grants access, the ftp daemon
will prompt for an "account." The Model 5390 server compares the text entered at this prompt
against its administrative password for an added level of security.
If the enable_security parameter is set to Y and the preferred security server is not reachable, the
Model 5390 server denies access to the ftp daemon.
When the validation process is complete, the Model 5390 server logs ftp access in the ACP logfile
(see Host-based Security Logging on page B1-22) and updates the who command display to look
something like this:
annex: who
A15-70
Port What User
1 PSVR ---
v1 CLI hobbes ---
v2 FTPD ---
annex:
Port What User
1 PSVR ---
v1 CLI hobbes ---
v2 FTPD hobbes ---
annex:
Location When
jdcm 4:06am 3:13 192.9.200.60
console
4:07am
--- ---
Location When
jdcm 4:06am 3:37 192.9.200.60
console
4:07am
2:43pm
Idle Address
192.9.200.60
:01 bryce
Idle Address
192.9.200.60
bryce
893-741-B