topic Re: ftp access in Operating System - Linux

ftp access

Nobody's Hero — Thu, 29 Dec 2005 07:40:25 GMT

I have a linux RH9 system called mullet, running vsftpd.

When I try to ftp into mullet from another system as any other user than root, I get:

Name (mullet:root): ltcsweep
530 Permission denied.
Login failed.

Where do I allow the user ltcsweep to ftp on mullet?

Is it ftpusers file or ftp.allow?

Re: ftp access

Sivakumar TS — Thu, 29 Dec 2005 07:55:42 GMT

Dear Robert,

check ftpusers file.

check the man page for more info.

With Regards,

Siva.

Re: ftp access

Nobody's Hero — Thu, 29 Dec 2005 08:10:17 GMT

I tried to add a ftpusers file into /etc/vsftpd. Then I restarted the vsftpd service. No Luck. Still get the same error. Is it an entry into vsftpd.conf?

Re: ftp access

Ivan Ferreira — Thu, 29 Dec 2005 08:16:38 GMT

Ensure that the user has a valid shell (listed in /etc/shells) and home directory (permissions).

The directive userlist_file in vsftpd.conf defines the name of the file to search for allowed user accounts.

See also userlist_enable (man vsftpd.conf).

Re: ftp access

Nobody's Hero — Thu, 29 Dec 2005 08:31:02 GMT

OK I added this into vsftpd.conf

userlist_enable=YES
userlist_file=/etc/vsftpd/ftpusers
userlist_deny=NO

Now I can login as ltcsweep user,
but I cant cd to any directories.
I cant even cd to /home/ltcsweep.

Re: ftp access

Ivan Ferreira — Thu, 29 Dec 2005 08:50:14 GMT

Do you have a permission denied error?

Can you list the directories or are you in a chroot jail? See also chroot_list_enable, chroot_local_user options.

Re: ftp access

Hemanth Gurunath Basrur — Thu, 29 Dec 2005 08:55:48 GMT

Hi Robert,

Refer the foll. links:

http://www.linuxquestions.org/questions/showthread.php?postid=584627

http://www.debiansec.com/linux/services/ftp.html#vsftpd_configuration_options

HTH.

Regards,
Hemanth

Re: ftp access

Nobody's Hero — Thu, 29 Dec 2005 11:17:43 GMT

After logging in as ltcsweep user, I try to cd to a dir and I get:

ftp> cd /home
550 Failed to change directory.
ftp>

Re: ftp access

Nobody's Hero — Thu, 29 Dec 2005 11:18:54 GMT

I can do a ls-l:

ftp> !ls -l
total 172
-rw-r--r-- 1 root root 959 Feb 24 2004 anaconda-ks.cfg
drwxr-xr-x 3 root root 4096 Jul 18 07:18 bin
drwxr-xr-x 3 root root 4096 Nov 28 07:34 Desktop
drwxr-xr-x 3 root root 4096 Nov 21 2003 Desktop1
drwxr-xr-x 4 root root 4096 Jul 11 2003 evolution
-rw-r--r-- 1 root root 1416 Aug 31 11:28 groupname_enumeration_v3.patch
drwxr-xr-x 4 root root 4096 Aug 11 2003 images
-rw-r--r-- 1 root root 43909 Feb 24 2004 install.log
-rw-r--r-- 1 root root 6957 Feb 24 2004 install.log.syslog
-rw-r--r-- 1 root root 641 Aug 30 12:44 krb5.conf
-rw-r--r-- 1 root root 2389 Aug 30 12:44 krb.conf
drwxr-xr-x 7 root root 4096 Jan 19 2004 Mail
-rw------- 1 root root 998 Nov 10 2004 mbox
drwxr-xr-x 5 root root 4096 Aug 18 2004 MIRROR
drwxr-xr-x 4 1002 1000 4096 Aug 30 13:40 pam_ldap-180
-rw-r--r-- 1 root root 210 Aug 10 2004 piranhakey.pub
-rw-r--r-- 1 root root 3255 Oct 30 2003 snmpd.conf
-rw-r--r-- 1 root root 420 Jun 27 2005 test
-rw-r--r-- 1 root root 48101 Aug 11 2003 upgrade.log
-rw-r--r-- 1 root root 1916 Aug 11 2003 upgrade.log.syslog
-rw-r--r-- 1 root root 2481 Aug 31 11:27 winbindd_v1.patch
ftp>

Re: ftp access

Nobody's Hero — Thu, 29 Dec 2005 11:32:23 GMT

Is there anyway I can open this system up, so that any user on this box can ftp and get anything from another system?

Meaning, I want ltcsweeps and root to be able to ftp into this system and get anything they want.

Re: ftp access

Ivan Ferreira — Thu, 29 Dec 2005 12:54:44 GMT

It seems that the user is chrooted, please post the output of ls / and pwd.

Configure:

chroot_list_enable=NO
chroot_local_user=NO

Re: ftp access

Vipulinux — Tue, 03 Jan 2006 08:25:36 GMT

Hi
If the /etc/ftpusers file exists the user from which you are trying to login must not be listed in that file.

Cheerz