anonymous ftp access denied

[Luca Rasconi]

Hi all,
i'm not able to understand why i cant make an anonymous ftp connection.
I follow the standard procedure:
1) create ftp user belonging to guest group, without password.
2) insert /usr/bin/false in /etc/shells
3) make the tree dir inside the ftp home directory.
the other users works!

...
but when i try to connect as anonymous the server respond:
[h3mih155]/etc/ftpd# ftp 127.0.0.1
Connected to 127.0.0.1.
220 FTP server ready.
Name (127.0.0.1:rasconil): anonymous
530 User anonymous access denied...
Login failed.
Remote system type is UNIX.
Using binary mode to transfer files.

and in the syslog file:
Mar 17 14:09:20 h3mih155 inetd[8712]: ftp/tcp: Connection from localhost (127.0.0.1) at Mon Mar 17 14:09:20 2003
Mar 17 14:09:24 h3mih155 ftpd[8712]: ACCESS DENIED (not in any class) TO localhost [127.0.0.1]
Mar 17 14:09:24 h3mih155 ftpd[8712]: FTP LOGIN REFUSED (access denied) FROM localhost [127.0.0.1], anonymous...


bah!!!!
thank you

[Rita C Workman]

Is there an existing ftpaccess file that restricts user anonymous possibly?

Just one thing to start checking,
Rita

[T G Manikandan]

Yes,check
/etc/ftpd/ftpusers
as whether you have restricted this user

[Luca Rasconi]

this is the ftpaccess file. To me there are no restriction for anonymous.

loginfails 2
noretrieve /etc/passwd /etc/group core .netrc .rhosts
suppresshostname yes
suppressversion yes

class local real,anonymous *.domain 0.0.0.0
class remote real *

#limit local 20 Any /etc/msgs/msg.toomany
#limit remote 100 SaSu|Any1800-0600 /etc/msgs/msg.toomany
#limit remote 60 Any /etc/msgs/msg.toomany

readme README* login
readme README* cwd=*

message /welcome.msg login
message .message cwd=*

compress yes local remote
tar yes local remote
# allow use of private file for SITE GROUP and SITE GPASS?
private yes

# passwd-check []
passwd-check rfc822 warn

log commands real
log transfers anonymous,real inbound,outbound
shutdown /etc/shutmsg

# all the following default to "yes" for everybody
delete no guest,anonymous # delete permission?
overwrite no guest,anonymous # overwrite permission?
rename no guest,anonymous # rename permission?
chmod no anonymous # chmod permission?
umask no anonymous # umask permission?

# specify the upload directory information
upload /FTPDIR/ * no
upload /FTPDIR/ /incoming yes ftp wftp 0600 dirs

# directory aliases
alias inc /incoming

# cdpath
cdpath /incoming
cdpath /pub


......
About the ftpusers file i try to connect renaming ftpusers as ftpusers.old and the result is the same

[john korterman]

Hi,
if you are running on a system with a hpux version lower than 11.00 the file that restricts the users ftp access is
/etc/ftpusers

I just tried entering the word "anonymous" in the above file on a 10.20 system and got the 530 message like yours.
Perhaps an idea?

regards,
John K.

[Luca Rasconi]

I ve 11i.

I ve no idea...

[Sergejs Svitnevs]

Try to enable anonymous account via SAM.
Networking and Communications -> Network Services -> Anonymous FTP -> Enable.

Regards,
Sergejs

[Luca Rasconi]

it doesn't work!

[john korterman]

Hi again,
since it complains about "not in any class", you try to include the user anoymous in the class in /etc/ftpd/ftpacces, i.e. change the following line:
class remote real *
to
class remote real,guest,anonymous *

just another idea..

regards,
John K.

[Luca Rasconi]

No it doen't work!

Thank you for your answers.

Bye
Luca

[john korterman]

Hi again,
just asking..
a change in /etc/ftp/ftpaccess requires that the inetd process must be forced to re-read its configuration, either by executing an "inetd -c" or a restart of the daemon. Hate to ask, but did you do that?

regards,
John K.