topic Re: vsftpd on RHEL AS 3 in Operating System - Linux

vsftpd on RHEL AS 3

Tonatiuh — Tue, 09 Nov 2004 12:42:33 GMT

How can I active the vsftpd on RHEL AS 3. I have issued the chkconfig vsftpd on, but I cannot open a ftp session to the server

Re: vsftpd on RHEL AS 3

Alexander Chuzhoy — Tue, 09 Nov 2004 12:45:45 GMT

In this version of redhat you should execute:
service vsftpd start

Re: vsftpd on RHEL AS 3

Tonatiuh — Tue, 09 Nov 2004 13:06:46 GMT

The service is started:

Server 1
c:\>ftp 172.16.11.27
> ftp: connect :Unknown error number
ftp>

Server 2
I can connect with every user but not with root user.

c:\>ftp 172.16.11.28
Connected to 172.16.11.28.
220 (vsFTPd 1.2.0)
User (172.16.11.28:(none)): root
530 Permission denied.
Login failed.

Re: vsftpd on RHEL AS 3

Steven E. Protter — Tue, 09 Nov 2004 15:57:36 GMT

root user is specifically prohibited from ftp access on all modern Linux releases.

The reason is because ftp transmits password authentication in clear text. That means any user on your network or worse the internet can sniff the network and get the root password.

I recommend openssh, which is standard in Red Hat and sftp. sftp will be enabled and it will encrypt the password.

If you must overwrite this functionality on ftp, you'll seee roots name in the ftpaccess file. If you remove it root should be able to ftp to the box(bad idea).

SEP

Re: vsftpd on RHEL AS 3

I H Chen — Wed, 10 Nov 2004 09:54:17 GMT

Hello,

The vsftpd was install in the "/usr/share/doc/vsftpd" directory. If you want it started at system start up. You can do it as following step:

1. If you have install vsftpd rpm. The system will create "/usr/share/doc/vsftpd" directory. Copy "/usr/share/doc/vsfptd/vsfptd.inetd" file into "/etc/xinetd.d" directory, and rename it as vsftpd or whatever you like. Then vi it and change "disable=yes" to "disable=no".

2. If you have install vsftpd rpm with success. It should create "/etc/vsftpd" directory there. In that directory there is a file named "vsftpd.conf"(Can't remember). Copy it to the /etc directory. There are lots of options you can change. You should modify it at the last two lines. Those options are setting it started when "xinetd" service started to launch vsftpd service. You can also check the readme file on the "/usr/share/doc/vsftp" directory.

3. In /etc directory, there are two files(vsftpd.root, vsftpd.users). Those two file control which user not allow to login by ftp service. You can comment "root" account to allow "root" account to login ftp service.

4. Run the "service xinetd.d restart" to make it happen.

That's all. Good luck!

Y.H.Chen