>Number:         37221
>Category:       pkg
>Synopsis:       ftp-proxy requires "proxy" user to be configured, which it is not by default
>Confidential:   no
>Severity:       non-critical
>Priority:       medium
>Responsible:    pkg-manager
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Fri Oct 26 09:20:01 +0000 2007
>Originator:     Jonathan Simms
>Release:        3.1
>Organization:
Motionbox, Inc.
>Environment:
NetBSD dummy 3.1 NetBSD 3.1 (GENERIC.pf-enabled) #0: Thu Oct 25 07:11:08 UTC 2007  root@dummy:/usr/src/sys/arch/i386/compile/GENERIC.pf-enabled i386 NetBSD

>Description:
After trying for several hours to get NetBSD to proxy ftp client requests on my local network (nbsd is acting as a gateway/pf firewall), and generally tearing my hair out, I discovered that by default ftp-proxy expects to run as the "proxy" user, and that the "proxy" account does not exist by default. 

*** authlog ***
Oct 26 08:20:13 dummy inetd[17450]: connection from lumpygravy, service ftp-proxy (tcp)

*** daemon ***
Oct 26 08:20:13 dummy ftp-proxy[17450]: cannot find user proxy


As ftp-proxy is included in the base set, it would seem to me that the user required to run it should also be added. Otherwise, I'd think that there would be a default entry in /etc/inetd.conf such as:


127.0.0.1:8021  stream  tcp     nowait  root /usr/libexec/ftp-proxy ftp-proxy -p -u daemon


or similar, so that it might work out of the box.

 


>How-To-Repeat:
see "full description"
>Fix:
either add a "proxy" user, or add "-u daemon" to the ftp-proxy configuration line in /etc/inetd.conf

adding a commented-out ftp-proxy line to /etc/inetd.conf would also be appreciated by the more novice user.