Ftpusers does not work hpux 11.31

[joseramirez]

I have installed the file /etc/ftpd/ftpusers and it does not work.

server1:/etc# more /etc/ftpd/ftpusers
root
bin
boot
daemon
digital
field
gateway
guest
nobody
operator
ris
sccs
sys

I have the following line in the file /etc/inetd.conf

ftp stream tcp6 nowait root /usr/lbin/ftpd ftpd -l -a -u 111

I have executed the command inetd -c also, but it ftpusers does not work

Do you can help me?.

Best regards.

[OldSchool]

define "does not work"...

those users can (or can't) ftp? trows errors?

[joseramirez]

The user root can do ftp in the server

[joseramirez]

I have installed ftpusers in other server and when I do ftp I cannot write the password

server2:/home/root->ftp 168.185.10.127
Connected to 168.185.10.127.
220 ceco_int.sdf.es FTP server (Version 1.1.214.4(PHNE_30990) Mon Nov 15 12:47:
2 GMT 2004) ready.
Name (168.185.10.127:root): root
530 User root access denied...
Login failed.
Remote system type is UNIX.
Using binary mode to transfer files.
ftp>

[Steven Schweda]

> The user root can do ftp in the server

Are you sure that "the server" which "root"
can access using FTP is the same "the server"
whose "/etc/ftpd/ftpusers" file you're
showing us?

ls -l /etc/ftpd/ftpusers

As usual, it's more useful to show actual
commands with their actual output than to
explain what you believe without showing the
actual evidence.

cd
ftp

After you log in as "root", ...

cd /etc/ftpd
get ftpusers
quit

cat ftpusers
ls -l ftpusers

[Kapil Jha]

from man page
"tpd rejects remote logins to local user accounts that are named in /etc/ftpd/ftpusers. Each restricted account name must appear alone on a line in the file. The line cannot contain any white space. User accounts that specify a restricted login shell in /etc/passwd should be listed in /etc/ftpd/ftpusers because ftpd accesses local accounts without using their login shells. UUCP accounts should be listed in /etc/ftpd/ftpusers. If /etc/ftpd/ftpusers does not exist, ftpd skips the security check."

I think you wrongly understood the ftpusers file.

The user you want to do ftp should not be in ftpusers file

BR,
Kapil+

[Steven Schweda]

> I think you wrongly understood the ftpusers
> file.
>
> The user you want to do ftp should not be
> in ftpusers file

I think that someone wrongly understood
something.

> server1:/etc# more /etc/ftpd/ftpusers
> root
> [...]

> The user root can do ftp in the server

Seems clear enough. "root" is in "ftpusers",
but "user root can do ftp".

I can't see if there's any invisible white
space there, but otherwise, it looks ok to
me.

[madhuchakkaravarthy]

Hi

users listed in /etc/ftpd/ftpusers cant use ftp.

regards

MC

[Kapil Jha]

Still could not spot where i took it wrong.

the user which is in ftpusers file would not be allowed to use as FTP user for that server.

BR,
Kapil+

[RC Park]

You'll need to do some reading to be sure you're getting what you want, but I've found little use for the ftpusers file, instead, I'd recommend removing that and creating the file, "ftphosts" - if you have the HP version of wuftp, you'll get a manpage on that file. It isn't very specific on how to set it up, but you should be able to figure it out. You create an allow section, and a deny section. Follow the pattern, and you'll get what you want. Unless you specify otherwise, all logging will go to syslog, so keep a tail -f running and in a separate screen, do your ftp tests once you've set this up. Hopefully, this will do the trick.

Regards,
RCP