topic Re: VSFTPD and Linux errors in Operating System - Linux

VSFTPD and Linux errors

TJ_16 — Fri, 02 Sep 2005 11:46:44 GMT

An application person of mine is asking about some errors he sees when ftp to a Unix box from a RH 3.0 AS server.

[root@plth021 xinetd.d]# ftp xxxxxx.xxx.xxx
Connected to xxxxxx.xxx.com.
220 xxxxxxxFTP server (Version wu-2.4(21) sid2.2 Fri Jan 17 09:47:20 CST 1997) ready.
500 'AUTH GSSAPI': command not understood.
500 'AUTH KERBEROS_V4': command not understood.
KERBEROS_V4 rejected as an authentication type

He wants to know what the 500 errors are and how to make them stop? FTP works, I guess he just doesn't like to see those errors...

Thanks,

Re: VSFTPD and Linux errors

Ivan Ferreira — Fri, 02 Sep 2005 14:20:42 GMT

The ftp client tries to establish connection using different authentication method. I think that is hard coded that kerberos should be tried if available.

Try using the -u option when issuing the ftp command.

ftp -u server

You then mus the the user command to authenticate.

Re: VSFTPD and Linux errors

Gopi Sekar — Sat, 03 Sep 2005 05:14:24 GMT

It looks the ftp client by default tries to Kerberos v4 authentication method. May be it is just a configuration setting, check the man page of ftp client for possible configuration file.

otherwise you can ignore this as warning message.

Regards,
Gopi

Re: VSFTPD and Linux errors

Steven E. Protter — Sat, 03 Sep 2005 18:33:30 GMT

I know Microsoft built into Windows 2003 server that it could not accept Kerebos v4 connections only v5 unless you patched it.

That means its theoretically possible that your server was built the same way and is rejecting Kerebos 4 connections.

I'd start the investigation with checking your kerebos inventory.

rpm -qa | grep -i kerberos

SEP