topic Re: FTP Access in Operating System - HP-UX

FTP Access

Giuseppe_13 — Mon, 07 Apr 2008 08:37:11 GMT

I have a problem.
I can access to server HP-UX 11.11, via ftp, using username root only.

Using other username, the answer is:

"220 iitsh005 FTP server (Version 1.1.214.4(PHNE_34544) Fri Feb 24 15:03:24 GMT 2
006) ready.
Utente (138.132.95.34:(none)): sist
530 User sist access denied..."

How is possible to enable the username "sist" ?

thanks

Re: FTP Access

Steven E. Protter — Mon, 07 Apr 2008 09:20:17 GMT

Shalom,

See the ftpacces file.

That reverse intuitively controls those users that can use ftp.

Also, having root with ftp access is dangerous and will fail you on most security audits.

SEP

Re: FTP Access

skt_skt — Mon, 07 Apr 2008 09:22:47 GMT

check if you have an entry in cat /etc/ftpd/ftpusers & cat /etc/ftpusers for sist which also could result the same error

Re: FTP Access

Steven E. Protter — Mon, 07 Apr 2008 09:55:35 GMT

Shalom,

See the ftpaccess list and man page for wu-ftpd.

This counter-intuitive list will permit you to authorize/block access.

You should block root ftp access. It id dangerous and a common failure point on security audits.

ftp authenticates in clear text and where possible sftp from openssh (secure shell) should be used in its place.

SEP

Re: FTP Access

Giuseppe_13 — Mon, 07 Apr 2008 10:01:39 GMT

The file /etc/ftpd/ftpusers is not present
The file /etc/ftpd/ftpaccess is not present

Re: FTP Access

Javed Khan_1 — Mon, 07 Apr 2008 10:35:34 GMT

Hi,
Please check /etc/shells for /usr/bin/sh & /sbin/sh

Re: FTP Access

YAQUB_1 — Mon, 07 Apr 2008 10:57:18 GMT

Hi Giuseppe,

This is very common problem, pls check the below URL site, hope it will help for U:-

http://forums12.itrc.hp.com/service/forums/questionanswer.do?admit=109447627+1207569264586+28353475&threadId=1026012

Thanks--Yaqub
HP Support!!!

Re: FTP Access

HP-FMS — Mon, 07 Apr 2008 11:02:30 GMT

Hi,..

Pls try this path,..

#ll /usr/newconfig/etc/ftpd/examples/*

In this dir u will get a ftpusers, access & etc....

Pls verify,..

H.Kannan.

Re: FTP Access

Giuseppe_13 — Mon, 07 Apr 2008 11:29:54 GMT

in /var/ad/syslog/syslog.log:
Apr 7 14:10:55 iitsh005 ftpd[6847]: FTP LOGIN REFUSED (bad shell) FROM 138.132.26.48 [138.132.26.48], sist

in /etc/shells:
/bin/sh
/bin/csh
/bin/ksh

the file /usr/bin/sh exists
the file /sbib/sh exists

The user "sist" has the ksh shell:
cat /etc/passwd | grep sist :
sist:7pb58KDNAZdKs:117:109:,,,:/home/sist:/usr/bin/ksh

Re: FTP Access

Javed Khan_1 — Mon, 07 Apr 2008 12:52:01 GMT

add /usr/bin/ksh to /etc/shells

Re: FTP Access

Giuseppe_13 — Mon, 07 Apr 2008 13:05:08 GMT

OK !

I have add /usr/bin/ksh in /etc/shells and now is possible to exec ftp connection to server.

Thanks