topic Re: Why is ftp session denied for certain users? in Operating System - HP-UX

Why is ftp session denied for certain users?

Roderick Derks — Mon, 17 Jan 2005 07:57:20 GMT

User A is member of group 1.
New user B is member of group 1.

User A can set up an ftp session.
User B can not.

What is going on?

Re: Why is ftp session denied for certain users?

Bill Hassell — Mon, 17 Jan 2005 08:04:22 GMT

A little more information is needed. Are these users on PCs and running standard ftp from a DOS window to connect to your HP-UX system? What is the error message from the ftp server? Have you looked at the man page for ftpaccess?

Re: Why is ftp session denied for certain users?

Roderick Derks — Mon, 17 Jan 2005 08:07:24 GMT

Acces direct from the (Windows) command line. User A has got the same home directory as User B.

Error "530 User ftptd access denied..."

I'll look into the ftpacces manpage.

Re: Why is ftp session denied for certain users?

Florian Heigl (new acc) — Mon, 17 Jan 2005 08:11:29 GMT

Roderick,

there might be some reasons -
sometimes the user needs a shell ftp considers 'valid', sometimes the permissions/ownership of the homedirectory, sometimes his is by mistake listed in the ftpusers file.

You could ensure that ftpd runs with the parameter -l ; this should get You some more explicit messages about the cause of a denied login into the syslog.

Re: Why is ftp session denied for certain users?

Roderick Derks — Mon, 17 Jan 2005 08:28:20 GMT

Not listed in /etc/ftpd/ftpusers.

There is no /etc/ftpd/ftpacces file.

Re: Why is ftp session denied for certain users?

Roderick Derks — Mon, 17 Jan 2005 08:36:56 GMT

USER UNABLE TO FTP:
ftptd:*:110:101:ftp to oracle:/usr/cible/tmp/ftp:/usr/bin/sh

ANONYMOUS USER CAN NOT FTP:
ftp:*:502:102: for lis application :/usr/cible/tmp/ftp:/bin/sh

USER THAT IS ABLE TO FTP:
lisfse:*:501:101: lis application :/usr/cible1/files:/bin/sh

(last user has a different HOME directory)

System is a trusted system.

Re: Why is ftp session denied for certain users?

Roderick Derks — Mon, 17 Jan 2005 08:41:45 GMT

syslog:

Jan 14 16:34:18 ezhlims1 ftpd[29812]: FTP session closed
Jan 14 16:34:19 ezhlims1 ftpd[29819]: Unable to provide ANONYMOUS ftp. The home directory '/usr/cible/tmp/ftp' is writable and should not be

This is it.

Can I still use this certain directory for ftp while anonymous logging is disabled?

Can I enable anounymous ftp on a secure system?

Re: Why is ftp session denied for certain users?

bhavin asokan — Mon, 17 Jan 2005 09:40:26 GMT

hi,

what is the ownership and permission of following directories.

/usr/cible/tmp/ftp

/usr/cible1/files

does the system have /etc/shells file
and both /usr/bin/sh and /bin/sh are included on that file.

regds,

Re: Why is ftp session denied for certain users?

bhavin asokan — Mon, 17 Jan 2005 09:52:15 GMT

hi,

from your post i assume the problem can be this

1.you may have a /etc/shells file and /bin/sh entry is only there.this may be disallowing the ftptd to login.

make an entry /usr/bin/sh in /etc/shells

2.folder /usr/cible/tmp/ftp may be having the permission/ownership for user ftptd only,not having write/execute permission for others.this may be disallowing ftp to login.
(see user ftp is not in the same group on ftptd)
give enough permission to others also
regds,

Re: Why is ftp session denied for certain users?

Roderick Derks — Mon, 17 Jan 2005 11:25:46 GMT

Thanks bhavin asokan,

All the settings are correct. The thing is that disabling ftp anonymous makes the /usr/cible/tmp/ftp directory unavailable for FTP sessions. I spoke to the vendor of the software that is running on the system. We are going to try to use another directory.

I want to create a user that can use ftp. I created one with the homedir /usr/cible/tmp/ftptd but I can not log in via ftp.

Right on the directory are good. What could be the issue here?

Re: Why is ftp session denied for certain users?

Roderick Derks — Mon, 17 Jan 2005 11:41:41 GMT

Creating a /etc/shells file with all shells defined worked out..Now the user ftptd is able to ftp to the server.

Re: Why is ftp session denied for certain users?

Roderick Derks — Mon, 17 Jan 2005 11:42:20 GMT

Thanks to all so your help!!