 {"id":47,"date":"2007-04-27T11:44:13","date_gmt":"2007-04-27T16:44:13","guid":{"rendered":"http:\/\/www.networkjack.info\/blog\/2007\/04\/27\/tiger-ftp-server-problems-bad-security-update\/"},"modified":"2007-05-02T11:58:39","modified_gmt":"2007-05-02T16:58:39","slug":"tiger-ftp-server-problems-bad-security-update","status":"publish","type":"post","link":"http:\/\/www.networkjack.info\/blog\/2007\/04\/27\/tiger-ftp-server-problems-bad-security-update\/","title":{"rendered":"Tiger FTP Server problems &#8211; Bad Security Update"},"content":{"rendered":"<p>A poster to Apple Mac OS X Server mailing list confirmed the problem with the FTP server in Tiger Server post 10.4.9.<\/p>\n<p>This is a big screwup by Apple.<\/p>\n<p>&#8212; BEGIN POST &#8212;<\/p>\n<p>I&#8217;ve been facing the very same issue at a customer&#8217;s place. FTP service was set with &#8220;FTP Root and Share Points&#8221; and was working fine until I apply the most recent security update. Now, when connecting the this ftp box, I&#8217;m sent to the file system root (\/). Of course, I can connect but permissions don&#8217;t let me copy anything there. I had to twist this setup big way for it to -kind of- work. More investigations to come.<\/p>\n<p>Well, after I tested this deeper this morning, I can tell you what happened.<\/p>\n<p>The 2007-004 Security Update replaced the ftp.plist in \/System\/Library\/LaunchDaemons from Mac OS X server with the version from Mac OS X *Client*. There is no check in the installer if the update installs on client or Server, and it is the same update for both.<\/p>\n<p>But, of course, FTP services on client and server are *very* different. With the client ftp.plist from client on the server, it is ftpd which is launched, not xftpd.<\/p>\n<p>The solution is to replace the ftp.plist with a previous version from Mac OS X Server. If you don&#8217;t have it, here is its content :<\/p>\n<pre>\r\n&lt;?xml version=\"1.0\" encoding=\"UTF-8\"?&gt;\r\n&lt;!DOCTYPE plist PUBLIC \"-\/\/Apple Computer\/\/DTD PLIST 1.0\/\/EN\" \"http:\/\/www.apple.com\/DTDs\/PropertyList-1.0.dtd\"&gt;\r\n&lt;plist version=\"1.0\"&gt;\r\n&lt;dict&gt;\r\n        &lt;key&gt;Label&lt;\/key&gt;\r\n        &lt;string&gt;com.apple.xftpd&lt;\/string&gt;\r\n        &lt;key&gt;Program&lt;\/key&gt;\r\n        &lt;string&gt;\/usr\/libexec\/xftpd&lt;\/string&gt;\r\n        &lt;key&gt;ProgramArguments&lt;\/key&gt;\r\n        &lt;array&gt;\r\n                &lt;string&gt;xftpd&lt;\/string&gt;\r\n                &lt;string&gt;-a&lt;\/string&gt;\r\n        &lt;\/array&gt;\r\n        &lt;key&gt;Sockets&lt;\/key&gt;\r\n        &lt;dict&gt;\r\n                &lt;key&gt;Listeners&lt;\/key&gt;\r\n                &lt;dict&gt;\r\n                        &lt;key&gt;SockPassive&lt;\/key&gt;\r\n                        &lt;true\/&gt;\r\n                        &lt;key&gt;SockServiceName&lt;\/key&gt;\r\n                        &lt;string&gt;ftp&lt;\/string&gt;\r\n                        &lt;key&gt;SockType&lt;\/key&gt;\r\n                        &lt;string&gt;SOCK_STREAM&lt;\/string&gt;\r\n                &lt;\/dict&gt;\r\n        &lt;\/dict&gt;\r\n        &lt;key&gt;inetdCompatibility&lt;\/key&gt;\r\n        &lt;dict&gt;\r\n                &lt;key&gt;Wait&lt;\/key&gt;\r\n                &lt;false\/&gt;\r\n        &lt;\/dict&gt;\r\n&lt;\/dict&gt;\r\n&lt;\/plist&gt;<\/pre>\n<p>Restart the server (relaunching the FTP service is not enough), and you should be up and running.<br \/>\n&#8212; END POST &#8212;<\/p>\n<p>Thanks to <a href=\"http:\/\/www.gete.net\/consulting\" title=\"Gete.Net Consulting\">Guillaume Gete<\/a><\/p>\n<p>related url:<\/p>\n<p><a href=\"http:\/\/discussions.apple.com\/thread.jspa?threadID=934022\" title=\"FTP Security Disaster\">Apple Discussion Board thread<\/a><\/p>\n<p>UPDATE: Looks like Apple has posted a <a href=\"http:\/\/docs.info.apple.com\/article.html?artnum=305445\" title=\"Security Update 2007-004 v1.1\">Security Update<\/a> to address this.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>A poster to Apple Mac OS X Server mailing list confirmed the problem with the FTP server in Tiger Server post 10.4.9. This is a&#8230;<\/p>\n<div class=\"more-link-wrapper\"><a class=\"more-link\" href=\"http:\/\/www.networkjack.info\/blog\/2007\/04\/27\/tiger-ftp-server-problems-bad-security-update\/\">Continue reading<span class=\"screen-reader-text\">Tiger FTP Server problems &#8211; Bad Security Update<\/span><\/a><\/div>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[9],"tags":[],"class_list":["post-47","post","type-post","status-publish","format-standard","hentry","category-os-x-server","entry"],"_links":{"self":[{"href":"http:\/\/www.networkjack.info\/blog\/wp-json\/wp\/v2\/posts\/47"}],"collection":[{"href":"http:\/\/www.networkjack.info\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.networkjack.info\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.networkjack.info\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/www.networkjack.info\/blog\/wp-json\/wp\/v2\/comments?post=47"}],"version-history":[{"count":0,"href":"http:\/\/www.networkjack.info\/blog\/wp-json\/wp\/v2\/posts\/47\/revisions"}],"wp:attachment":[{"href":"http:\/\/www.networkjack.info\/blog\/wp-json\/wp\/v2\/media?parent=47"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.networkjack.info\/blog\/wp-json\/wp\/v2\/categories?post=47"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.networkjack.info\/blog\/wp-json\/wp\/v2\/tags?post=47"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}