On 7 May 2014 21:04, David Komanek <[email protected]> wrote:

>    * What led up to the situation?
> using ftp connection to the server creates an entry probably in wtmp/utmp
> with reference to non-existent /dev//ftpNNNN file (NNNN is the process id
> of ftp server), which is not deleted afterwards, so it seems the user has
> opend session forever
>

Hello,

Thanks for the report.

Unfortunately the answer may not exactly be the one you were looking for.

We have been seriously considering dropping programs like ftp, ftpd, telnet
and telnetd from Heimdal, as they they are no longer maintained, either
upstream or in Debian. They also have known security issues (e.g. weak
encryption protocols), and the protocols used were poorly designed.

As such, if possible, I recommend that you use something more up-to-date
and secure, such as Kerberos over ssh/scp/sftp or Kerberos over http
instead.
-- 
Brian May <[email protected]>

Reply via email to