topic Re: Secured FTP - error in Operating System - HP-UX

Secured FTP - error

Renante M. Yu_1 — Wed, 06 Aug 2003 05:43:13 GMT

Hi, I was able to secure the ftp service of my server. I have also modified the file /etc/ftpd/ftpaccess. But the ftp account that I made is having a problem connecting to my server. Here's the error:

550 Can't set guest privileges.
Login failed.
421 Service not available, remote server has closed connection
ftp>

Re: Secured FTP - error

Steven E. Protter — Wed, 06 Aug 2003 05:58:51 GMT

One of the steps in securing a ftp server is to disable guest access.

You did a good job, you locked out the guest user.

ftp is an inherently insecure protocol, because it transmits passwords back and forth in clear text.

I recommend moving to Secure Shell on the server and sftp on the client.

SEP

Re: Secured FTP - error

U.SivaKumar_2 — Wed, 06 Aug 2003 06:09:29 GMT

Hi,

What is the permissions and ownership of the ftp home directory of that ftp user ?.

chown the home directory to that of the ftp user and give proper read and write permission to the owner viz. ftp user.

regards,

U.SivaKumar

Re: Secured FTP - error

Steve Post — Thu, 07 Aug 2003 11:09:49 GMT

I assume the account is real?

In that ftpaccess file you should have a line that says....
"guestgroup XYZ"
Where XYZ is your user's account.

The user's home directory should NOT be owned by them. They should not have permission to modify their own root/home directory.

Better advice:
Their is a tech document that talks about ftpaccess. Oh of course there's the man page.

steve