topic Re: FTP access restricted in Operating System - HP-UX

FTP access restricted

Mike Ingram_1 — Thu, 09 Oct 2003 02:09:56 GMT

Hi
I have taken over admin of a system, and am not sure what the previous guy did!
I am trying to ftp into the machine, but get the following message:

C:\>ftp 10.24.132.28
Connected to 10.24.132.28.
220 K360-1 FTP server (Version 1.1.214.8 Fri Apr 20 07:27:42 GMT 2001) ready.
User (10.24.132.28:(none)): express
530 User express access denied...
Login failed.
ftp>

Any ideas?
It's not the inetd.sec file - already checked that one!

Thanks

Re: FTP access restricted

Mark Grant — Thu, 09 Oct 2003 02:13:14 GMT

Is there a /etc/ftpd/ftpusers file with the users name in it?

If there is, take the user name out of the file.

Re: FTP access restricted

Mike Ingram_1 — Thu, 09 Oct 2003 02:18:13 GMT

Thanks Mark,
There is only a file /etc/ftpd/ftpgroups that contains a group that my user is not in.
I removed the file, but it hasn't made a difference. Anywhere else to look?

Cheers.

Re: FTP access restricted

T G Manikandan — Thu, 09 Oct 2003 02:18:39 GMT

Also check whether the user shell is defined in the /etc/shells file.

The /etc/shell file should look like

/usr/bin/sh
/usr/bin/ksh

Add the user's login shell here

Re: FTP access restricted

Mark Grant — Thu, 09 Oct 2003 02:22:41 GMT

the ftpd daemon will also deny access if the user doesn't have a password.

Re: FTP access restricted

Hari Kumar — Thu, 09 Oct 2003 02:23:01 GMT

Checked ?? the users shell in /etc/passwd , which should be listed in /etc/shells alsoo
If not create the file and list it...

HTH

Re: FTP access restricted

Mike Ingram_1 — Thu, 09 Oct 2003 02:25:59 GMT

Thanks TG

The file exists and the shell (/bin/ksh) is in there.
The user can telnet okay - just not able to ftp.

Thanks.

Re: FTP access restricted

T G Manikandan — Thu, 09 Oct 2003 02:28:16 GMT

If the /etc/shells file is not present you can create with with the users shell definitions inside that.

ALso,check whether .netrc file is there in the user's home dir.
If present rename it

Revert

Re: FTP access restricted

Graham Cameron_1 — Thu, 09 Oct 2003 02:30:03 GMT

If Marks suggestion doesn't help, turn on debugging on the server.
Edit /etc/inetd.conf and change the line beginning "ftp" so that the last entry is "ftpd -lv".
(
My entire line is
ftp stream tcp nowait root /usr/lbin/ftpd ftpd -lv
)
Then restart inetd with "inetd -c", and retry the FTP.
Then look at your syslog file (usually /var/adm/syslog/syslog.log) for clues.
There are further ftpd diagnostic options, such as -i, -L, -o.
And more config files - /etc/ftpd/ftpaccess.
See man ftpd, man ftpaccess
-- Graham

Re: FTP access restricted

T G Manikandan — Thu, 09 Oct 2003 02:35:40 GMT

Also check whether you have a file ftpusers under /etc.

check its contents!