Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 266333 - net-ftp/gftp-2.0.19: Can't receive file list after FTPS log in
Summary: net-ftp/gftp-2.0.19: Can't receive file list after FTPS log in
Status: RESOLVED NEEDINFO
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: x86 Linux
: High normal (vote)
Assignee: Gentoo Linux Gnome Desktop Team
URL: https://bugzilla.gnome.org/show_bug.c...
Whiteboard:
Keywords: NeedPatch
Depends on:
Blocks:
 
Reported: 2009-04-16 05:48 UTC by Felix K
Modified: 2011-04-03 11:42 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Felix K 2009-04-16 05:48:22 UTC
Hi,
gftp.2.0.19 doesn't seem to work in FTPS mode on my machine:

When i use it in FTP mode, everything is fine. When i use it in FTPS mode, the client is able to log in, but then it can't receive the file list.

Session log:

Looking up dd8002.kasserver.com
Trying dd8002.kasserver.com:21
Connected to dd8002.kasserver.com:21
220 FTP on dd8002.kasserver.com ready
AUTH TLS

234 AUTH TLS successful
SSL connection established using TLSv1/SSLv3 (EDH-RSA-DES-CBC3-SHA)
PBSZ 0

200 PBSZ 0 successful
PROT P

200 Protection set to Private
USER $FOO

331 Password required for $FOO
PASS xxxx
230 User $FOO logged in
SYST

215 UNIX Type: L8
TYPE I

200 Type set to I
PWD

257 "/" is the current directory
Loading directory listing / from server (LC_TIME=C)
PASV

227 Entering Passive Mode (85,13,132,93,195,93).
LIST -L

150 Opening ASCII mode data connection for file list
Warning: Cannot parse listing 421 No transfer timeout (300 seconds): closing control connection

gftp --info:

gFTP 2.0.19
#define _REENTRANT
#define _GNU_SOURCE
#define _LARGEFILE_SOURCE
#define _FILE_OFFSET_BITS 64
sizeof (off_t) = 8
#define HAVE_INTL_PRINTF
GFTP_OFF_T_HEX_PRINTF_MOD = %llx
GFTP_OFF_T_INTL_PRINTF_MOD = %'lld
GFTP_OFF_T_PRINTF_MOD = %lld
GFTP_OFF_T_11PRINTF_MOD = %11lld
#define HAVE_GETADDRINFO
#define HAVE_GAI_STRERROR
#define HAVE_GETDTABLESIZE
#define G_HAVE_GINT64
#define HAVE_LIBREADLINE
#define ENABLE_NLS
#define HAVE_GETTEXT
glib version: 2.18.4
PTY implementation: unix98
OpenSSL version: OpenSSL 0.9.8k 25 Mar 2009
Enabled protocols: FTP FTPS HTTP HTTPS Local SSH2 Bookmark FSP

Best regards,
Felix

Reproducible: Always




emerge --info:

Portage 2.1.6.7 (default/linux/x86/2008.0/desktop, gcc-4.3.2, glibc-2.8_p20080602-r1, 2.6.27-gentoo-r10 i686)
=================================================================
System uname: Linux-2.6.27-gentoo-r10-i686-Intel-R-_Core-TM-2_Duo_CPU_E8400_@_3.00GHz-with-glibc2.0
Timestamp of tree: Thu, 16 Apr 2009 04:45:01 +0000
app-shells/bash:     3.2_p39
dev-java/java-config: 1.3.7-r1, 2.1.7
dev-lang/python:     2.5.2-r7
dev-util/cmake:      2.6.2-r1
sys-apps/baselayout: 1.12.11.1
sys-apps/sandbox:    1.6-r2
sys-devel/autoconf:  2.13, 2.63
sys-devel/automake:  1.5, 1.7.9-r1, 1.8.5-r3, 1.9.6-r2, 1.10.2
sys-devel/binutils:  2.18-r3
sys-devel/gcc-config: 1.4.0-r4
sys-devel/libtool:   1.5.26
virtual/os-headers:  2.6.27-r2
ACCEPT_KEYWORDS="x86"
CBUILD="i686-pc-linux-gnu"
CFLAGS="-march=prescott -O2 -pipe -fomit-frame-pointer"
CHOST="i686-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/kde/3.5/env /usr/kde/3.5/share/config /usr/kde/3.5/shutdown /usr/share/config"
CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/env.d /etc/env.d/java/ /etc/fonts/fonts.conf /etc/gconf /etc/revdep-rebuild /etc/sandbox.d /etc/terminfo /etc/udev/rules.d"
CXXFLAGS="-march=prescott -O2 -pipe -fomit-frame-pointer"
DISTDIR="/usr/portage/distfiles"
FEATURES="distlocks fixpackages parallel-fetch protect-owned sandbox sfperms strict unmerge-orphans userfetch"
GENTOO_MIRRORS="http://ftp-stud.fht-esslingen.de/pub/Mirrors/gentoo/ "
LANG="C"
LDFLAGS="-Wl,-O1"
LINGUAS="en"
MAKEOPTS="-j3"
PKGDIR="/usr/portage/packages"
PORTAGE_CONFIGROOT="/"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --stats --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
SYNC="rsync://rsync.europe.gentoo.org/gentoo-portage"
USE="X a52 aac acl acpi alsa berkdb bluetooth branding bzip2 cairo cdr cli cracklib crypt cups dbus dri dvd dvdr dvdread eds emboss encode esd evo fam ffmpeg firefox flac fortran gdbm gif gnome gnome-keyring gpm gstreamer gtk hal iconv ipv6 isdnlog jpeg kde lame ldap libnotify mad midi mikmod mp3 mpeg mpeg2 mudflap ncurses nls nptl nptlonly ogg opengl openmp pam pcre pdf perl png ppds pppd python qt3 qt3support qt4 quicktime readline reflection sdl session spell spl ssl startup-notification svg sysfs tcpd tiff truetype twolame unicode usb vorbis win32codecs x264 x86 xine xml xorg xulrunner xv xvid zlib" ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mmap_emul mulaw multi null plug rate route share shm softvol" APACHE2_MODULES="actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" ELIBC="glibc" INPUT_DEVICES="keyboard mouse evdev" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LINGUAS="en" USERLAND="GNU" VIDEO_CARDS="nv nvidia vesa"
Unset:  CPPFLAGS, CTARGET, EMERGE_DEFAULT_OPTS, FFLAGS, INSTALL_MASK, LC_ALL, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS, PORTDIR_OVERLAY
Comment 1 Gilles Dartiguelongue (RETIRED) gentoo-dev 2009-05-23 12:21:41 UTC
could you report this problem upstream and paste the url here ?
Comment 2 Felix K 2009-06-01 10:33:29 UTC
(In reply to comment #1)
> could you report this problem upstream and paste the url here ?

Sorry for the late reply and this (possibly) silly question:

"Report upstream", what does this mean?

Best regards, Felix
Comment 3 Gilles Dartiguelongue (RETIRED) gentoo-dev 2009-06-08 22:31:02 UTC
it means opening a bug at https://bugzilla.gnome.org and pasting the url here. We might do it for you, but it's probably faster if you do it and keep track of it yourself. Then we can integrate a patch to fix your issue.
Comment 4 Felix K 2009-06-11 13:57:47 UTC
(In reply to comment #3)
Okay, here we go:

http://bugzilla.gnome.org/show_bug.cgi?id=585437
Comment 5 Gilles Dartiguelongue (RETIRED) gentoo-dev 2010-01-27 22:19:47 UTC
what ftp server are you using on the other end btw ?
Comment 6 Felix K 2010-01-29 08:10:37 UTC
(In reply to comment #5)
> what ftp server are you using on the other end btw ?

Hm, how can I determine this?
Comment 7 Gilles Dartiguelongue (RETIRED) gentoo-dev 2010-01-29 10:13:26 UTC
Oh I thought it was one of your servers. You might get it in the connection initialization log. You can just attach the full output of the log console of gftp.
Comment 8 Felix K 2010-01-30 09:43:46 UTC
(In reply to comment #7)
> Oh I thought it was one of your servers. You might get it in the connection
> initialization log. You can just attach the full output of the log console of
> gftp.

Session log says:

Successfully changed local directory to /home/felix
Looking up dd8002.kasserver.com
Trying dd8002.kasserver.com:21
Connected to dd8002.kasserver.com:21
220 FTP on dd8002.kasserver.com ready
AUTH TLS

234 AUTH TLS successful
SSL connection established using TLSv1/SSLv3 (DHE-RSA-AES256-SHA)
PBSZ 0

200 PBSZ 0 successful
PROT P

200 Protection set to Private
USER $USER
331 Password required for $USER
PASS xxxx
230 User $USER logged in
SYST

215 UNIX Type: L8
TYPE I

200 Type set to I
CWD /

250 CWD command successful
PWD

257 "/" is the current directory
Loading directory listing / from server (LC_TIME=C)
PASV

227 Entering Passive Mode (85,13,132,93,195,99).
LIST -L

150 Opening ASCII mode data connection for file list
Comment 9 Doktor Notor 2010-03-26 09:23:19 UTC
Are you behind firewall/NAT? If so, you'll have huge problems w/ FTPS and passive mode. Basically, you need to open the ports used for passive mode data connection on the firewall, since the conntrack_ftp module cannot figure out which ports are being used with encrypted FTP communication.
Comment 10 Pacho Ramos gentoo-dev 2010-12-10 19:57:55 UTC
Maybe people should try to find a replacement for gftp since it looks a dead project :-(
Comment 11 Pacho Ramos gentoo-dev 2011-03-20 13:49:15 UTC
(In reply to comment #9)
> Are you behind firewall/NAT? If so, you'll have huge problems w/ FTPS and
> passive mode. Basically, you need to open the ports used for passive mode data
> connection on the firewall, since the conntrack_ftp module cannot figure out
> which ports are being used with encrypted FTP communication.

Can you please reply to this question?
Comment 12 Pacho Ramos gentoo-dev 2011-04-03 11:42:19 UTC
(In reply to comment #11)
> (In reply to comment #9)
> > Are you behind firewall/NAT? If so, you'll have huge problems w/ FTPS and
> > passive mode. Basically, you need to open the ports used for passive mode data
> > connection on the firewall, since the conntrack_ftp module cannot figure out
> > which ports are being used with encrypted FTP communication.
> 
> Can you please reply to this question?