Ben, Apologies for the trouble. I will be careful with my experiments. Thanks Prasanna
On Jun 30, 2015, at 5:09 PM, Allen, Benjamin S. <[email protected]> wrote:
Prasanna,
Please fix this issue on Tubes immediately. I've killed your globus-gridftp-server process to eliminate the immediate threat. This host has an enormous amount of WAN bandwidth and could cause quite a bit of issues for us and whoever someone decided to point it at. Please do not EVER run GridFTP (or any other service) with anonymous access enabled. I believe we talked to you about this in the past. If we find this issue again, I'll suspend your JLSE account.
Ben
On Jun 30, 2015, at 4:58 PM, Zbiegiel, Piotr T. <[email protected]> wrote:
Ben, Can you work with user pbalapra to configure the ftp server he or she is running for testing on dtn12? Not only is it allow anonymous read/write access but it points to the user's home directory. I can do many nasty things to his account and the user is putting the server itself at risk of compromise. As a test I successfully uploaded the file FOOBAR to the user's home directory.
Let me know if you have any questions.
-Peter