Should ProFTPD be removed from future Slackware releases?
 

Poll as requested here: http://www.linuxquestions.org/questi...3/#post4194907

I was just thinking about doing this after reading that thread. Voted yes.

Yep.

Honestly, I don't know which ftp service to use. It bugs me that there are two. Being that I trust the Slackware brand, I would like to trust the software that's installed by default.

It would be helpful if those that voted "NO" would give some feedback as to why.

I don't think "It's what I've always used" is going to help sway any decisions though ;)

I've voted no.
Because I didn't found a solution to use vsftpd with a mysql database,
without using PAM. As far as I know, PAM is not used on Slackware.
So if anyone could give me a hint how to solve this, I could switch
from proftpd to vsftpd.

Regards, Jack.
Cheers

Personally I use Pure-ftpd http://www.pureftpd.org/project/pure-ftpd with my virtual users in a MySQL database.

Hi

I voted no because I thought it was asking if "ftp"
should be removed.

Regards
John

Does Slackware actually need any FTP server in the main distribution? These days extras might be more appropriate

Proftpd had a compromise, which they owned up to and fixed. It seems that this is an actively maintained project so NO

The version 1.3.3d closed the security issue. ;)
No need to remove it.

Regards, Jack.
Cheers

Because it's known to work. It's feature-rich. And, if there are really security problems, use sftp or httpd or rsync or nfs.
The very simple ftpd or vsftpd may be needed by some people. So I have no objection to include it. If space is constrained, one can always remove some of the the numerous multimedia apps which are not much different from each other.

If the Slackware Team affords to keep track of the upstream updates, then Proftp is worth keeping as it may provide some features currently not covered by vsftp. Otherwise, the community can take over its maintenance on SBo, or elsewhere until the Team decides to take back on board.

I am abstaining from voting.

Deleted

Wait, there's been ANOTHER hole in ProFTPD since this poll started? Heh.

It seems like ProFTPD has had a history of security flaws. As I recall, the reason that vsftpd became the default in Slackware (somewhere around Slack 9 maybe?) was because of a exploit that the ProFTPD team didn't react to quickly enough.

I suppose keeping it included as an option doesn't hurt anything, but since there are obviously some reliability concerns I don't know that enough people will run it to make it worth keeping around. Maybe it's time for a move to /pasture to maintain backwards compatibility with sites already running it, but focus new installations on vsftpd?