FTP access denied

[Gerald_13]

Hi,
When I do a ftp to a server (neptune) I have this message with all user...

#ftp neptune
Connected to neptune.axa-fr.intraxa.
220 neptune FTP server (Version 1.1.214.4(PHNE_29461) Thu Nov 20 06:40:06 GMT 2003) ready.
Name (neptune:s557561): root
530 User root access denied...
Login failed.
Remote system type is UNIX.
Using binary mode to transfer files.

Thanks for your help.
Regard,
Gerald

[Ravi_8 · Accepted solution]

Hi

check for ftp commented lines in /etc/pam.conf, uncomment the lines

[Michael Tully]

You might have an entry in the /etc/ftpd/ftpaccess or ftpusers file that does not allow root access from ftp. Check the remote server.

Also:- can you ftp to this server as any other user?

[Gerald_13]

The file is OK...but the pb is.
This file doesn't move since nov 2000. So the pb is here since yesterday.
Thanks.
regards.

[Gerald_13]

The ftpaccess doesn't exist and the ftpuser too !

cd ftpd
neptune:(root)/etc/ftpd> ls
ftp-exec
pids

thanks !
Gerald

[Gerald_13]

On the remote server..that doesn't work with all user...

Thanks

[Rgomes]

Hi Gerald,

You should look into the file neptune:/etc/ftpd/ftpusers and have to omit 'root' user if you want to access via ftp by root user.

regards,
Richard

[Michael Tully]

On the remote server, if no one can ftp to it, probably means that the service has been disabled. Check the /etc/inetd.conf file to see if the line with ftp has been commented out.

[Michael Duthie]

Also check /var/adm/inetd.sec for any ftp deny.

Also can you telnet ? if not it could be a inetd prob.

[Jan Sladky]

hi Gerald,
check /etc/inetd.con that following line isn't commented:
ftp stream tcp nowait root /usr/lbin/ftpd
ftpd -l

and that in /var/adm/inetd.sec
isn't something like :

ftp deny xxx.yy.yy.z

br jan

[Gerald_13]

Hi,
this file is OK..
I would like to refress this process (inetd)
Can I do this with kill -hup whitout lost the cnx with the server ?
thanks.

[Michael Tully]

After making any changes to /etc/inetd.conf you run:

# inetd -c

which tells inetd to re-read it's config file. There is a man page on inetd.conf that supplies this information for future reference.

[Jan Sladky]

restart inetd (or rereading of /etc/inetd.conf) you can done with following command, your connection with server will not interrupted (I try it via ssh now ;-):

inetd -c

if you want to log inetd enter

inetd -l

br Jan

[Gerald_13]

It's OK now..
for your information :
someone put the file /etc/shells with /usr/bin/false --> not good for ftp.
Thanks very much.
Regards,
Gerald

[Bharat Katkar]

Gerald,
"someone put the file /etc/shells with /usr/bin/false "
This is part of FTP security and is done deliberatley. Better to cross check.
Regards,

[isaac_loven]

I had the same problem. Just Want others to know of how how we solved it.

I changed the users shell listed in /etc/passwd from: /bin/ksh
to: /usr/bin/ksh
I did: usermod -s /usr/bin/ksh loginid
Isaac.