ftp problem

[Tarek]

hi there,
a nis user is trying to do an ftp, but he had the error:
530 User name_user access denied...
Login failed.
Remote system type is UNIX.
Using binary mode to transfer files.
ftp>
The user enters on any workstation correctly with userid and password, but when he tries an ftp on any ws he had that error. But, if i do an ftp, as that user, on the nis master server, it recognizes the user and asks me the passwd. Only 3 users has this problem, all other nis users no. Why???
Using hpux 11.00. A nis user.
Thanks

[Dan Hetzel]

Hi Tarek,

A few things to check:

Make sure the user shell is listed in /etc/shells as FTP looks in there to define which shells are allowed.

I.E. User has a shell of /bin/ksh which is a link to /usr/bin/ksh. If the /etc/shells file has only /usr/bin/ksh, the user will be denied access.

Next is /etc/ftpusers. If a user is listed in this file, they will be denied access.

Best regards,

Dan

[Alex Glennie]

Have you checked that the affected users login shell(s) are listed in both /etc/shells on the NIS master and on the local hosts ?

[Tarek]

on the nis master server i checked the /etc/shells and the user shell is in that file. This file doens't exist on the local ws user..do i have to make this file???
The /etc/ftpusers file doesn't exist neither in the nis master server nor in the local_users ws.

[Alex Glennie · Accepted solution]

i would ;)

[Dan Hetzel]

Hi Tarek,

I would create this file locally as well ;-)

Dan

[Tarek]

now it seems working...cos it's asking me also the user's password. But it's a little strange. This file, /etc/shells, doesn't exist on any ws, only on the nis master server, but i have problems only with 3 users. Why all other users don't have this problem?? (the /etc/shells doesn't exist even for them)...again..now ftp works for one ws, but if i do an ftp (as those 3 users) on other ws it gives me the same error...do i have to put the /etc/shells on all the ws (they're a lot)...maybe i'm wrong, but it's strange...
isn't there another way (i don't know) that allows me to use ftp without modifying all ws's /etc/shells file.
Thanks again.

[Dan Hetzel]

Hi Tarek,

You'll have to copy the /etc/shells on all workstations people are supposed ftping to.

Regarding the 3 users for which ftp is allowed, do they have a different shell than other users ?

Regards,

Dan

[Dan Hetzel]

Hi Tarek,

One more info regarding the standard shells:

The ftp user must have a standard shell returned by getusersh()

--QUOTE
getusershell() Returns a pointer to the first legal user
shell as defined in the file /etc/shells (see
shells(4)). If /etc/shells does not exist or
is not readable, getusershell() returns the
following standard system shells:

/sbin/sh
/usr/bin/sh
/usr/bin/rsh
/usr/bin/ksh
/usr/bin/rksh
/usr/bin/csh
/usr/bin/keysh

as if they were contained in /etc/shells.
<-QUOTE

Best regards,

Dan

[Alex Glennie]

ditto ...

ps Nice working with you Dan ;)

[Tarek]

I have solved the problem. I have modified the user's shell in the /etc/passwd nis master server. It was /bin/csh and i have put /usr/bin/csh. The /bin/csh was in the /etc/shells. I have lot of users that have this shell (/bin/csh) in the /etc/passwd's nis master server. I did a test and i've seen that for all this users i have the same error. If i modify their shell, the problem is solved, without adding the /etc/shells localy on each ws. Is it possible that if the shell is a link, i have to put /etc/shells on every locally ws, instead if it isn't it is not required.
Thanks again for you disposal.

[Dan Hetzel]

Tarek,

That's far too many points for a single question, I feel like cheating 8-(

Alex,

This wasn't a race. As I explained in another post yesterday, I'm spending 16+ hours in the office while my 2 collegues are a goot time with EMC at New-Orleans.
As all systems run perfectly (thanks to HP) I haven't got much to do, apart from surfing ;-)
Anyway, I'm really enjoying this forum.

Dan

PS: Tarek, please don't assing me any more points for this one :^), select 'N/A' - Thanks.

[Dan Hetzel]

Spell checker in action:
"have a good time"
"assign"

No points, thanks !

[Tarek]

I know you aren't doing a race. If i assign you both many points is because you're helping me so much. Maybe you think these are easy questions and so i'm assigning so many points; of course for you they are easy, but for me they aren't. And if i assign more points to one instead of others, it isn't for simpaty, instead it's just because i'm having from one more detailed answers and not only on how to solve the problem but also the explain.
However thanks both for you help. I think i will disturb you later with another problem. Where i work everything is a problem :-)

[Alex Glennie]

Dan

I never said it was ? No one can be 24x7 and it's in the spirit of the forums that everyone helps out as & when they can .... I wasn't trying to imply any hidden meaning.

As to points.... It makes up for the lack of pointswe often get to correct answers .... I'll look forward to your next problem(s) if Dan don't beat me to them ;) (joke)

[Dan Hetzel]

Hi Alex,

I never believed in "hidden meaning". I was just kidding. ;)

You're right regarding the lack of points we often (don't) get for correct answers. I shouldn't feel guilty about that.

I'm convinced that, whatever the question, Tarek will get a lot of prompt and hopefully good replies.

Warmest regards,

Dan