FTP only works as root user

[Everett Sollars]

Fresh install of HPUX 11.00 and I can only ftp to workstation HP C180 as super-user from any other pc/ws on the network. I've seen this a long time before even on HPUX 10.20. What's the probelm and how do we allow any user to be able to ftp to it.

thanks,

Everett

[Olav Baadsvik]

Hi,

If the user you log in as when you ftp into
the machine has a default shell that is
not one of the standard (supported) shell
you will have this problem. Check this.
If you use a unsupported shell you have
to make a file /etc/shell where you
inform the system of this. see man shells

Regards
Olav

[Michael Tully]

Hi,

Remove the /etc/ftpd/ftpusers file. This will bypass all ftp security checks. See the man page 'ftpusers' for further information. This file resides in a different directory on HPUX 11 than it did on 10.20.

-Michael

[Deepak Extross]

On HP-11, it's /etc/ftpusers.

[Everett Sollars]

I've removed ftpusers and ftpaccess(created when trying the "ftpd -a" options in inetd.conf) in the /etc/ftpd directory, but will try it tomorrow at office in relation to the "/etc/ftpusers" file.

Seems like the place to start, considering the files in /etc/ftpd directory didn't seem to alter much at all.

Will update with results tomorrow. Any other ideas would be appreciated, just in case the above doesn't work.

Thanks,

Everett

[Deepak Extross]

Probably a silly question, but did you verify that the /etc/passwd file in the new machine contains the user name and non-null password for the user-id you want to use for ftp?

[Deepak Extross]

Probably a silly sueation, but did you verify that the /etc/passwd file in the new machine contains the user name and non-null password for the user-id you want to use for ftp?

[Everett Sollars]

Yes, Id/passwd work fine when logging into CDE and function normally, also using a standard C-shell.

Can telnet in fine, rlogin fine, etc., but as soon as one tries to enter a non-root user id at the ftp login request prompt, system will not allow user to login and doesn't even request for a password. Gives message like user not allowed or denied access right away.

Same problem if I just open a shell window and try to ftp to itself with id other than root.


Everett

[Ravi_8]

Hi,

I have empty ftpusers file, but users that i have created(in /etc/passwd) can do ftp. check your passwd file and ensure that you have created users, who wants to do ftp

[John Strang]

You need to check which shell your user has (it will be specified in /etc/passwd)
Then add that shell to the /etc/shells file.

John

[Darrell Allen]

Hi Everett,

The following is for an 11.0 system.

Per man ftpd:
BEGIN QUOTE
ftpd authenticates users according to three rules:

o+ The user name must be in the password data base, /etc/passwd, and not have a null password. The client must provide the correct password for the user before any file operations can be performed.

o+ The user name must not appear in the file /etc/ftpd/ftpusers (see ftpusers(4)).

o+ The user must have a standard shell returned by getusershell().

END QUOTE

man getusershell lists the following as defaults in the absence of /etc/shells:
/sbin/sh
/usr/bin/sh
/usr/bin/rsh
/usr/bin/ksh
/usr/bin/rksh
/usr/bin/csh
/usr/bin/keysh

If you create /etc/shells, you will want to add all of the above your users use as well as any not listed above.

ftpaccess adds a lot of functionality. See man ftpaccess for more info. I'd suggest not using ftpaccess until you are familiar with what it does.

Darrell