topic ftp using Kerberos can not authenticate login in Operating System - Linux

ftp using Kerberos can not authenticate login

Randy Hagedorn — Mon, 19 May 2008 19:21:26 GMT

Hi,

I am trying to use FTP to a RHEL 5 HP Blade Server, but am having difficulty due to an authentication error. Even if I try to ftp to itself I get the same following login failure:

# ftp
ftp> open hostname
Connected to hostname.
220 hostname FTP server (Version 5.60) ready.
334 Using authentication type GSSAPI; ADAT must follow
GSSAPI accepted as authentication type
GSSAPI error major: Unspecified GSS failure. Minor code may provide more inform
ation
GSSAPI error minor: Unknown code krb5 195
GSSAPI error: initializing context
GSSAPI authentication failed
334 Using authentication type KERBEROS_V4; ADAT must follow
KERBEROS_V4 accepted as authentication type
Kerberos V4 krb_mk_req failed: You have no tickets cached
Name (robin:root): username
530 Must perform authentication before identifying USER.
Login failed.
Remote system type is UNIX.
Using binary mode to transfer files.
ftp>

Does anyone have any ideas, as to what I can check?

Thanks,
Randy

Re: ftp using Kerberos can not authenticate login

Steven E. Protter — Mon, 19 May 2008 20:12:11 GMT

Shalom,

By default, root is disabled for ftp in the vsftpd daemon.

See /etc/vsfptd/vsftpd.conf and other configuration files if you want to risk enabling root ftp

SEP

Re: ftp using Kerberos can not authenticate login

Randy Hagedorn — Tue, 20 May 2008 11:20:51 GMT

In our particular case, since we are using gssftp, we changed file /etc/xinetd.d/gssftp and removed the -a option from the server_args parameter. This removes the requirement of authentication of logins.

Randy