From bill@duchess.wagill.com  Sat Aug 31 05:08:42 1996
Received: from duchess.wagill.com (duchess.wagill.com [198.182.208.147])
          by freefall.freebsd.org (8.7.5/8.7.3) with ESMTP id FAA09658
          for <FreeBSD-gnats-submit@freebsd.org>; Sat, 31 Aug 1996 05:08:40 -0700 (PDT)
Received: (from bill@localhost) by duchess.wagill.com (8.7.5/8.7.3) id FAA29553; Sat, 31 Aug 1996 05:08:37 -0700 (PDT)
Message-Id: <199608311208.FAA29553@duchess.wagill.com>
Date: Sat, 31 Aug 1996 05:08:37 -0700 (PDT)
From: William A Gill <bill@duchess.wagill.com>
Reply-To: bill@duchess.wagill.com
To: FreeBSD-gnats-submit@freebsd.org
Subject: ftpd apparently not recognizing -l or -S parms
X-Send-Pr-Version: 3.2

>Number:         1559
>Category:       bin
>Synopsis:       ftpd apparently not recognizing -l or -S parms
>Confidential:   no
>Severity:       non-critical
>Priority:       medium
>Responsible:    freebsd-bugs
>State:          closed
>Quarter:
>Keywords:
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Sat Aug 31 05:10:01 PDT 1996
>Closed-Date:    Sat Jan 11 12:17:09 PST 1997
>Last-Modified:  Sat Jan 11 12:17:46 PST 1997
>Originator:     William A Gill
>Release:        FreeBSD 2.1-STABLE i386
>Organization:
>Environment:

	FreeBSD duchess.wagill.com 2.1.5-RELEASE FreeBSD 2.1.5-RELEASE #0: Wed Jul 17 03:09:31  1996
	jkh@whisker.cdrom.com:/usr/src/sys/compile/GENERIC  i386

>Description:

	1) I am not getting any ftpd accesses logged in the syslog.

	2) I am not getting any anonymous ftp accesses in /var/log/ftpd.

	I have "ftpd -ll -S" in the inetd conf file.

	These used to work under 2.1.

>How-To-Repeat:

	

>Fix:
	
	

>Release-Note:
>Audit-Trail:

From: Bill <bill@wagill.com>
To: freebsd-gnats-submit@freebsd.org
Cc:  Subject: bin/1559
Date: Thu, 24 Oct 1996 01:03:31 -0700

 In relation to Problem Report 'bin/1559':
 
 I researched this problem and found the following:
 
 1.  Regarding the '-l' and '-ll' switches:
 
 The 'ftpd' daemon issues ftp activity log messages with a facility of
 LOG_FTP and a level of LOG_INFO; well, the "stock" 'syslog.conf' file does
 not have an entry to write messages with either a facility of LOG_FTP nor a
 level of LOG_INFO.
 
 I "solved" the problem by adding a 'ftp.*' line to my syslog.conf file.
 However, in my opinion, the ultimate solution is to change the syslog level
 in 'ftpd' to be at least LOG_NOTICE for activity logged with the -l and -ll
 switches.  Incidentally, adding '*.info' to syslog.conf will flood your
 messages file with truly informational-only, and NOT noteworthy, messages.
 
 2.  Regarding the -S switch:
 
 The ftpd daemon only logs to '/var/log/ftpd' anonymous ftp *transfers* (ie:
 store and retrieve), and NOT anonymous ftp *accesses* (ie: log-ins and
 directory listings).
 
 - Bill.
 

From: J Wunsch <j@uriah.heep.sax.de>
To: bill@wagill.com
Cc: freebsd-gnats-submit@freebsd.org
Subject: Re: bin/1559
Date: Thu, 24 Oct 1996 11:00:49 +0200 (MET DST)

 As Bill wrote:
 
 >  The 'ftpd' daemon issues ftp activity log messages with a facility of
 >  LOG_FTP and a level of LOG_INFO; well, the "stock" 'syslog.conf' file does
 >  not have an entry to write messages with either a facility of LOG_FTP nor a
 >  level of LOG_INFO.
 >  
 >  I "solved" the problem by adding a 'ftp.*' line to my syslog.conf file.
 >  However, in my opinion, the ultimate solution is to change the syslog level
 >  in 'ftpd' to be at least LOG_NOTICE for activity logged with the -l and -ll
 >  switches.
 
 No, they are truly info's only.  Failed login attempts are notices.
 
 Adding ftp.* to the default syslogd.conf (and to newsyslog.conf) is
 IMHO the politically correct way.
 
 -- 
 cheers, J"org
 
 joerg_wunsch@uriah.heep.sax.de -- http://www.sax.de/~joerg/ -- NIC: JW11-RIPE
 Never trust an operating system you don't have sources for. ;-)

From: Bill <bill@wagill.com>
To: joerg_wunsch@uriah.heep.sax.de (Joerg Wunsch)
Cc: freebsd-gnats-submit@freebsd.org
Subject: Re: bin/1559
Date: Thu, 24 Oct 1996 11:14:24 -0700

 >No, they are truly info's only.  Failed login attempts are notices.
 >
 >Adding ftp.* to the default syslogd.conf (and to newsyslog.conf) is
 >IMHO the politically correct way.
 
 Okay, well, then at least the man page for ftpd should be updated to
 indicate that the sys admin must add 'ftp.info' to the syslog.conf file for
 the '-l' and '-ll' switches to work.
 
 The man page presently is misleading in that simply adding '-l' or '-ll' to
 the ftp entry in the inetd.conf file will NOT cause the desired effect of
 logging ftp activity.
 
 Cheers.
 
 - Bill.
 
State-Changed-From-To: open->closed 
State-Changed-By: mpp 
State-Changed-When: Sat Jan 11 12:17:09 PST 1997 
State-Changed-Why:  
The manual page was updated to make it clear that 
syslog may have to be configured to display all 
of the messages logged by ftpd. 
>Unformatted:
