1858.
+ General:
o "Closing blah..." message upon exit could not be
- surpressed.
+ suppressed.
o Added /PAGE and /NOPAGE to DELETE switches.
o Added GO response for DELETE /ASK (delete all the rest
without asking).
+ We now make every attempt to not write passwords to the
debug.log.
+ New Certificate Authority certificates file, includes the
- Kermit Project at Columbia University so you can accesss our
+ Kermit Project at Columbia University so you can access our
IKSD securely.
+ Secure targets improved and better documented in Unix
makefile.
PUT), they apply only to that command.
/USER:name
- To be used in case a page requires a username for accesss. The
+ To be used in case a page requires a username for access. The
username is sent with page requests. If it is given with the
OPEN command it is saved until needed. If a username is included
in a URL, it overrides the username given in the switch.
performed securely on HTTPS connections.
/PASSWORD:text
- To be used in case a web page requires a password for accesss.
+ To be used in case a web page requires a password for access.
The password is sent with page requests. If it is given with the
OPEN command it is saved until needed. If a password is given in
a URL, it overrides the one given here. CAUTION: (same as for
http www.columbia.edu -g kermit/index.html
- If you need to accesss a website for which a username and password are
+ If you need to access a website for which a username and password are
required, you can supply them on the command line with -u and -P. If
you include a username but omit the password, Kermit prompts you for
it:
the server does support accounts, the account is accepted if it
is valid and rejected if it is not. The account might be used
for charging purposes or it might be a secondary password, or it
- might be used for any other purpose, such as an accesss password
+ might be used for any other purpose, such as an access password
for a particular disk. Servers that support accounts might or
might not allow or require the account to be sent prior to
login; usually it is sent after login, if at all. Synonym:
[ [240]Top ] [ [241]FTP Top ] [ [242]C-Kermit Home ] [ [243]Kermit Home
]
+3.1.5. Making Proxy Connections
+
+ The simplist form of firewall traversal is the HTTP CONNECT command.
+ The CONNECT command was implemented to allow a public web server which
+ usually resides on the boundary between the public and private networks
+ to forward HTTP requests from clients on the private network to public
+ web sites. In order to allow secure web connections to be established,
+ the CONNECT command works by authenticating the client with a
+ username/password and then establishing a tunnel to the desired host.
+
+ Many web servers support the CONNECT command and it can be configured
+ to allow outgoing connections to authenticated user to any TCP/IP
+ hostname/port combination accessible to the web server. The limitations
+ of HTTP CONNECT is that it can only be used for outgoing connections
+ for protocols that are implemented using TCP/IP. Protocols such as
+ Kerberos authentication that use UDP/IP cannot be tunneled using HTTP
+ CONNECT.
+
+ Kermit provides support for the use of HTTP CONNECT proxy services with
+ the command:
+
+ SET TCP HTTP-PROXY [/USER:username /PASSWORD:password] hostname/ip-address[:po
+rt]
+
+ When a port is not specified the default port configured on the HTTP
+ server is used. This is frequently port 443. When a hostname is
+ specified, it is resolved using the DNS available to the web server.
+
3.2. Making Secure FTP Connections
Also see: [244]Accessing IBM Information Exchange with Kermit.
In the previous section, you can see several examples of traditional
insecure authentication: username and password sent across the network
in clear text. Of course this is bad practice on at least two counts:
- (1) storing passwords in files (such as script files) gives accesss to
- the target systems to anybody who can obtain read accesss to your
+ (1) storing passwords in files (such as script files) gives access to
+ the target systems to anybody who can obtain read access to your
scripts; and (2) sending this information over the network leaves it
open to interception by network sniffers or compromised hosts.
servers are beginning to appear that offer secure forms of
authentication, in which no information is sent over the network that
would allow anyone who intercepts it to usurp your identity and gain
- your accesss rights.
+ your access rights.
Kermit provides an equivalent form of FTP security for each type of
IETF standard security implemented in Telnet. These include
SET FTP CREDENTIAL-FORWARDING { ON, OFF }
Tells whether end-user credentials are to be forwarded to the
server if supported by the authentication method (GSSAPI-KRB5
- only). This is often required to allow accesss to distributed
+ only). This is often required to allow access to distributed
file systems (e.g. AFS.)
SET FTP DATA-PROTECTION-LEVEL { CLEAR, CONFIDENTIAL, PRIVATE, SAFE }
SET QUIET { ON, OFF }
This command applies to Kermit in general, not just FTP. OFF by
- default; when ON, it surpresses most messages from most commands
+ default; when ON, it suppresses most messages from most commands
as well as the file-transfer display.
SET FTP PROGRESS-MESSAGES { ON, OFF }
transfer immediately and fail if an error occurs with any single
file in the group. Example: you have given Kermit a list of
files to send, and one of the files can not be found, or read
- permission is denied. Note that cancelling a file by typing 'X'
+ permission is denied. Note that canceling a file by typing 'X'
during transfer is not considered an error (if you want to
cancel the entire transfer, type 'Z' or Ctrl-C).
When used with FTP DELETE, the /RECURSIVE switch deletes files
but not directories, and furthermore depends on the server
providing recursive file lists, which is not the normal
- behavior. For further details, see the decriptions of these
+ behavior. For further details, see the descriptions of these
switches in [274]Section 3.6. Synonyms: FTP MDELETE (Kermit
makes no distinction between DELETE and MDELETE); RDELETE.
directory to the server's /tmp directory. This works only if the server
uses the same directory notation that you used in the as-name AND the
given directory already exists on the server AND if you have write
- accesss to it.
+ access to it.
Use caution when uploading from a case-sensitive file system, such as
UNIX, to a file system that is not case sensitive, such as Windows or
plus all directories beneath it, including empty directories,
replicating the directory structure on the server. No special
capabilities are required in the server, but of course your
- login ID on the server must have the appropriate accesss and
+ login ID on the server must have the appropriate access and
permission to create directories. Recursive PUTs work not only
between like platforms (e.g. UNIX to UNIX) but also between
unlike ones (e.g. UNIX to VMS or Windows), in which case
Tells Kermit to ask the server to rename each file according to
the given template as soon as, and only if, it has been received
completely and successfully. The template works as in /AS-NAME.
- Requires write and rename accesss on the server, so doesn't
+ Requires write and rename access on the server, so doesn't
usually work with (e.g.) anonymous uploads to public incoming
areas where the permissions don't allow renaming. Examples:
/DELETE
Each file that is downloaded successfully is to be deleted from
- the server. Requires the appropriate file accesss rights on the
+ the server. Requires the appropriate file access rights on the
server.
/SERVER-RENAME-TO:template
REMOTE TYPE (RTYPE) FTP TYPE
REMOTE EXIT (REXIT) FTP BYE
- The commands in the right-hand column always accesss FTP. The commands
- in the left column can accesss either Kermit protocol or FTP:
+ The commands in the right-hand column always access FTP. The commands
+ in the left column can access either Kermit protocol or FTP:
* When GET-PUT-REMOTE is set to KERMIT, or to AUTO when there is no
- FTP connection, the commands in the left-hand column accesss Kermit
+ FTP connection, the commands in the left-hand column access Kermit
protocol, and those right-hand column are required for FTP.
* When GET-PUT-REMOTE is set to FTP, or to AUTO when there is an
- active FTP connection, the commands in the left-hand column accesss
- the FTP connection and can not be used to accesss Kermit protocol.
+ active FTP connection, the commands in the left-hand column access
+ the FTP connection and can not be used to access Kermit protocol.
In this case, if you want to be able to use both Kermit protocol
and the FTP connection, you must SET GET-PUT-REMOTE KERMIT, and
- then use the FTP commands in the right-hand column to accesss the
+ then use the FTP commands in the right-hand column to access the
FTP connection.
Note that file-management commands such as DIRECTORY, DELETE, CD, PWD,
FTP SIZE filename
Sends a SIZE directive to the server for the given file. The
filename must not contain wildcards. The server responds with an
- error if the file can't be found, is not accesssible, or the
- SIZE directive is not supported, otherwise with the length of
- the file in bytes, which Kermit displays and also makes
- available to you in its \v(ftp_message) variable. If the
- directive is successful, Kermit (re-)enables it for internal use
- by the GET and MGET directives on this connection.
+ error if the file can't be found, is not accessible, or the SIZE
+ directive is not supported, otherwise with the length of the
+ file in bytes, which Kermit displays and also makes available to
+ you in its \v(ftp_message) variable. If the directive is
+ successful, Kermit (re-)enables it for internal use by the GET
+ and MGET directives on this connection.
FTP MODTIME filename
Works just like the SIZE directive except it sends an MDTM
6.6. Arrow Keys
- As of version 8.0.201, C-Kermit on most platforms lets you accesss the
+ As of version 8.0.201, C-Kermit on most platforms lets you access the
command history buffer with arrow keys, just as you always could with
control characters. The restrictions are:
This change was made to facilitate command recall in Linux-based PDAs
that don't have a Control key, or at least not one that's easily (or
- always) accesssible, such as the Sharp Zaurus SL5500.
+ always) accessible, such as the Sharp Zaurus SL5500.
[ [391]Top ] [ [392]Contents ] [ [393]C-Kermit Home ] [ [394]Kermit
Home ]
SET ROOT directory
Like UNIX chroot, without requiring privilege. Sets the root for
- file accesss, does not allow reference to or creation of files
+ file access, does not allow reference to or creation of files
outside the root, and can't be undone.
SET SEND PERMISSIONS { ON, OFF }
The following new or improved built-in functions are available:
- \fcmdstack() Allows programmatic accesss to the command stack.
+ \fcmdstack() Allows programmatic access to the command stack.
\fcvtdate() [448]Section 8.13, format options added
\fdelta2secs() [449]Section 8.13
\fdostounixpath(s1) Converts a DOS filename to Unix format.
\fverify(s1,s2,n)
As of version 8.0.211, returns -1 if s2 is an empty string.
Previously it returned 0, making \fverify(abc,\%a) look as if
- \%a was a string combosed of a's, b's, and/or c's when in fact
+ \%a was a string composed of a's, b's, and/or c's when in fact
it contained nothing.
\fcode(string)
8.7.3. The \fcmdstack() Function
- The new \fcmdstack() function gives accesss to the command stack:
+ The new \fcmdstack() function gives access to the command stack:
\fcmdstack(n1,n2)
Arguments: n1 is the command stack level. If omitted, the
displaying summary results. You can do this by defining a macro named
ON_CTRLC. When Ctrl-C is detected, and a macro with this name is
defined, Kermit executes it from the current command level, thus giving
- it full accesss to the environment in which the interruption occurred,
+ it full access to the environment in which the interruption occurred,
including local variables and open files. Only when the ON_CTRLC macro
completes execution is the command stack rolled back to top level.
ON means always print the value; OFF means never print it.
In any case, the value of the most recent S-Expression (and the
- S-Expression itself) may be accesssed programmatically through the
+ S-Expression itself) may be accessed programmatically through the
following variables:
\v(sexpression)
Added in C-Kermit 8.0.201: Rudimentary support for Caller ID, for use
with the ANSWER command. If the modem reports Caller ID information,
- Kermit stores it in variables that you can accesss after the call is
+ Kermit stores it in variables that you can access after the call is
answered:
\v(callid_date) The date of the call
Kermit presently has no built-in knowledge of the Caller ID
capabilities or commands of the modems in its database.
- Since the variables can be accesssed only after the call is answered,
+ Since the variables can be accessed only after the call is answered,
the only way to refuse a call is to answer it, inspect the variables,
and then hang it up if desired.
14. DIALOUT FROM TELNET TERMINAL SERVERS
For years, C-Kermit has supported dialing out from Telnet modem servers
- (also called reverse terminal servers or accesss servers), but until
- now there was no way for Kermit to control the communication parameters
+ (also called reverse terminal servers or access servers), but until now
+ there was no way for Kermit to control the communication parameters
(speed, parity, etc) on the serial port of the terminal server; it had
to use whatever was there.
connection automatically when the telephone call is hung up (e.g.
"autohangup" on Cisco models).
- For a Linux-based Telnet Com-Port server, click the Srdird link:
+ For a Linux-based Telnet Com-Port server, click the Sredird link:
[ [575]Top ] [ [576]Contents ] [ [577]Sredird ] [ [578]C-Kermit Home ]
[ [579]Kermit Home ]
projects / ckermit.git / blobdiff