530 User root access denied..., Login Failed

[Ranjith_5]

Hi all,

Please help...

cat /etc/inetd.conf|grep -i \^ftp


ftp stream tcp nowait root /usr/lbin/ftpd ftpd -l -a


cat /ftp/ftpd/ftpusers

#root
daemon
bin
sys
adm
uucp
lp
nuucp
hpdb
guest

netstat -a|grep ftp

tcp 0 0 *.ftp *.* LISTEN
tcp 0 0 test.ftp .3922 ESTABLISHED
tcp 0 0 test.ftp .4160 FIN_WAIT_2
tcp 0 0 test.ftp .1375 FIN_WAIT_2



regrds,
Syam

[Uday_S_Ankolekar]

Check /var/adm/inetd.sec file

-USA..

[Uday_S_Ankolekar]

Or sometime it occurs when the trusted user password database becomes
corrupted.

Perform the following commands to recreate the password database file.

mv /tcb/files/auth/system/pw_id_map pw_id_map.bak

/usr/sbin/authck -pv

Goodluck

-USA..

[Jeff Schussele]

Hi Syam,

Check to see if you have the following file:

/etc/ftpd/ftpusers

Any username listed in there *cannot* login via ftp. And generally it's best not to allow root ftp sessions for security reasons.

HTH,
Jeff

[Ranjith_5]

Hi ,

My system was converted to trusted yesterday.

#mv /tcb/files/auth/system/pw_id_map pw_id_map.bak

command is not working saying,
mv: /tcb/files/auth/system/pw_id_map: cannot access: No such file or directory


I dont have a /var/adm/inetd.sec file.

Hi jeff,
I have posted my ftpusers in the first post.The root user is hashed.Still it gives a prob.


regards,
Syam

[Jeff Schussele]

Hi (again) Syam,

Oops sorry I missed that in your initial post.
I seem to remember that even though you "comment" a username it'll still match.
You have to completely remove the line or edit it such that it cannot pattern match.

Rgds,
Jeff

[Ranjith_5]

Hi Jeff,

I removed root entry from ftpusers and did inetd -c.

Still it gives the problem.

my /etc/passwd file is as follows.

root:*:0:3::/:/usr/bin/ksh
daemon:*:1:5::/:/sbin/sh
bin:*:2:2::/usr/bin:/sbin/sh
sys:*:3:3::/:
adm:*:4:4::/var/adm:/sbin/sh
uucp:*:5:3::/var/spool/uucppublic:/usr/lbin/uucp/uucico
lp:*:9:7::/var/spool/lp:/sbin/sh
nuucp:*:11:11::/var/spool/uucppublic:/usr/lbin/uucp/uucico
hpdb:*:27:1:ALLBASE:/:/sbin/sh
www:*:30:1::/:
webadmin:*:40:1::/usr/obam/server/nologindir:/usr/bin/false
smbnull:*:101:101:DO NOT USE OR DELETE - needed by Samba:/home/smbnull:/sbin/sh
mysql:*:102:102::/home/mysql:/sbin/sh

regards,
Syam

[Ranjith_5]

Hi all,

Im signing off for today...My friend will answer to your replies for time being..else I will come back tomorrow and reply.

Thanks a lot..

Regards,
Syam

[Vinay_24]

Hi,
All,
I am Syams friend.
We changed the entry in /etc/inetd.conf for ftpd -l -a to ftpd -l ftp .Now the problem seems to be resolved.
But now the security warning of /etc/issue doesnt appear.Can you please advice on the same.

Earlier
stream tcp nowait root /usr/lbin/ftpd ftpd -l -a
Later
ftp stream tcp nowait root /usr/lbin/ftpd ftpd -l

Thanks and Regards,
Vinay

[Uday_S_Ankolekar]

inetd.conf file should have -a as discussed inorder to get ftp login message
ex: ftp stream tcp nowait root /usr/lbin/ftpd ftpd â l -a

and then modify /etc/ftpd/ftpaccess

The line should be
message /etc/issue login

restart inetd by inetd -c

-US

[joinsiva]

hi syam,

tried this entry in /etc/ftpd/ftpaccess before the banner line

class all real,anonymous,guest *

this lines allows the ftp access.


and in inetd.conf u should have

ftpd -la /etc/ftpd/ftpaccess

or

ftpd -la



for ftp to work. restall are same.

regards
sivakumar

[Ranjith_5]

Thanks all.The problem was resolved.

Regards,
Syam