topic Re: FTP-sublogin on a Trusted System in Operating System - HP-UX

FTP-sublogin on a Trusted System

MCP-DOC — Wed, 13 Feb 2002 12:04:46 GMT

Hi guys,

I'm trying to setup sub-login for Anonymous FTP. Enabling Anonymous FTP is no problem, neither is creating /ftp/etc/passwd and /ftp/etc/groups. In the ftp-passwd-file I create user, e.g. ftpuser. Then I try to set his ftp-passwd, 'passwd -F /ftp/etc/passwd ftpuser'. I'm getting back the message : 'Password cannot be changed. Reason: Cannot access protected password entry'.

I'm running HP-UX 11 on a trusted system.

Re: FTP-sublogin on a Trusted System

Corthouts Carlo — Wed, 13 Feb 2002 12:33:26 GMT

Hi,

One workaround is to copy the passwd binary from a 10.20 machine to the 11.00 machine and rename it to something like passwd10.20 and use this binary to add the password.

The 11.00 passwd binary on trusted systems seems to ignore the -F option.

The problem has been fixed in 11i.

What you also could do is install these patches :

PHCO_25527 : libpam libpam_unix
Dependencies :

PHCO_13809
PHNE_23833

PHCO_24189 : passwd cum. patch

The possibility exists it is fixed in these patches but that it is not documented yet.

Else use the workaround with a 10.20 binary.

Re: FTP-sublogin on a Trusted System

MCP-DOC — Wed, 13 Feb 2002 12:41:33 GMT

Thanx, but we only got out HP-UX 11 servers....
I read something about pvconvert and pwdadm... anybody?

Re: FTP-sublogin on a Trusted System

Corthouts Carlo — Wed, 13 Feb 2002 13:11:06 GMT

I don't even know if those commands even exist.

First try to install the patches. If
that is not a possibility than log a call
at you HP support center and request the passwd file for 10.20 from them.

But that is the only way to get it to work unless you are willing to upgrade to 11i

Re: FTP-sublogin on a Trusted System

MCP-DOC — Wed, 13 Feb 2002 13:49:39 GMT

aloha!

I tried to convert my trusted system -> non-trusted:

# tsconvert -r

then I again tried to change the passwd:

#passwd -F /home/ftp/etc/passwd ftpuser
New passwd: *******
Re-enter passwd: *******
Invalid login name.

Why do i get the message invalid login name? I added ftpuser to the /home/ftp/etc/passwd file and the /home/ftp/etc/groups file?