[NNTP] When to use 440 for POST?

Julien ÉLIE julien at trigofacile.com
Mon Jan 11 23:31:32 PST 2010


Hi,

Following a discussion on news.software.nntp:

    http://groups.google.fr/group/news.software.nntp/browse_frm/thread/3d0059fe42fa4933
    <news:hifqvt$bvn$1 at solani.org>

where POST (wrongly) answers 440 in INN instead of 480 when posting
is not allowed but authentication can occur, what is expected to
be sent if POST is still not allowed after authentication?


RFC 4643:

   Note that a server may perform a successful authentication exchange
   with a client and yet still deny access to some or all resources; the
   permanent 502 response indicates that a resource is unavailable even
   though authentication has been performed (this is in contrast to the
   temporary 480 error, which indicates that a resource is unavailable
   now but may become available after authentication).


RFC 3977:

   If posting is
   prohibited for some installation-dependent reason, a 440 response
   MUST be returned.

      502: It is necessary to terminate the connection and to start a new
      one with the appropriate authority before the command can be used.



Does it mean that 502 is the right answer to POST when it is not possible
for a user to POST articles (but others may be able to POST)?

RFC 3977 takes precedence over RFC 4643 but 502, as a generic answer,
is also defined by RFC 3977.


The only example in RFC 3977 is:

   Example of an attempt to post when posting is not allowed:

      [Initial connection set-up completed.]
      [S] 201 NNTP Service Ready, posting prohibited
      [C] POST
      [S] 440 Posting not permitted


Had the greeting been 200, would 502 have been used?  Or is 502 an invalid
answer after POST?
What are usual cases of use for 440?

-- 
Julien ÉLIE

« Un dictionnaire est comme une montre ; il vaut mieux en avoir un
  que pas du tout, mais le meilleur n'est jamais tout à fait exact. »
  (Georges-Bernard Shaw) 



More information about the ietf-nntp mailing list