ftp rejects valid unix login

[Donald Thaler]

For some strange reason i can't ftp to my unix app server) as the user oracle, i get an invalid login. Yet i can telnet to venus and login as oracle, and i can ftp as the user 'root' and as the user 'banner'. I've reset the oracle password to make sure i had it correct but i still can't ftp as the user oracle ?? I tried scp (winscp) and that works with the user 'oracle'. Any ideas why ftp wouldn't allow the oracle user to login ?
I have other unix servers and i don't have any problems ftp'ng and loggin in as oracle.

[James R. Ferguson]

Hi Donald:

Perhaps you have denied the oracle user in your '/etc/ftpd/ftpaccess' file.

Regards!

...JRF...

[TTr · Accepted solution]

Another place to check is the shell oracle is using. It is usually different that that of root's. The shell has to be added in /etc/shells.

What is the error in the syslog?

[Donald Thaler]

(1) there is no '/etc/ftpd/ftpaccess' file

(2) /etc/shells ... there is no shells subdirectory..

Pardon my ignorance but when we are talking about the oracle and root shell, is it the .login or .profile or some other file, and i'm assuming i will have to create the /etc/shell directory and put the shell file in it ?






Perhaps you have denied the oracle user in your '/etc/ftpd/ftpaccess' file.

Regards!

...JRF...

TTr Feb 21, 2008 20:11:33 GMT points for answer: Unassigned 10 9 8 7 6 5 4 3 2 1 0

--------------------------------------------------------------------------------
Another place to check is the shell oracle is using. It is usually different that that of root's. The shell has to be added in /etc/shells.

What is the error in the syslog?

[TTr]

What is the error from the ftpd daemon in /var/adm/syslog/syslog.log?

Is it something like "invalid shell"?

If so you have to create a text file by the name /etc/shells and in it on separate lines you type the paths of the shell of the oracle account as it appears in the /etc/passwd file. Something like /usr/bin/ksh.

You should add the shell that root and banner are using in case the ftp stops working for those accounts.

You are using HP-UX right? What version?

[Michael Steele_2]

Since secure login and secure copy are working then this is probably on purpose with ftp ports blocked at the router. You can test this with a telnet ip port command. If it says CONNECTED then you're OK, else it will hang and provide no information as it is suppose to.

telnet 92.84.29.2 23

[Donald Thaler]

i'm using 11.23...

muchas gracias creating the shells file did the trick...

[Jeeshan]

Check file in /etc/ftupusers where all valid ftp users listed.

[Eric SAUBIGNAC]

Bonjour Donald,

Be aware that by creating /etc/shells, default values will no more work. So add those default values in /etc/shells (man getusershell) :

/sbin/sh
/usr/bin/sh
/usr/bin/rsh
/usr/bin/ksh
/usr/bin/rksh
/usr/bin/csh
/usr/bin/keysh

Regards

Eric