ftp user denied

[MarkW_1]

When trying to ftp to a server I get the following message:

ftp carelink
Connected to carelink.uhcolorado.edu.
220 carelink FTP server (Version 1.1.214.4 Mon Feb 15 08:48:46 GMT 1999) ready.
Name (carelink:root):
530 User root access denied...
Login failed.
Remote system type is UNIX.
Using binary mode to transfer files.

Where do I set ftp access to allow or disallow a user?

[Ron Kinner]

Don't think you want to change the rejection of user 'root'. It's a security feature.

Try again but su to a different user name before you ftp.

Ron

[Joseph C. Denman]

Mark,

root is normally put the /etc/ftpd/ftpusers file for sercurity reasons. This file list all users that are NOT allowed to ftp to the system.

...jcd...

[Helen French]

Hi,

You can check two files in the system - /etc/ftpuser ( deny ftp for listed users) and /var/adm/inetd.sec ( allow /deny source system's IP address ). It's a security issue, if you enable ftp access to root.

Check this out for some more information:

http://us-support3.external.hp.com/cki/bin/doc.pl/sid=4d99f82e049e5d8175/screen=ckiDisplayDocument?docId=500000000092216

HTH,
Shiju

[MarkW_1]

user 'root' is not in the ftpusers file. I checked in sam to verify. I created a new user and I am getting the same message.

[Patrick Wallek]

Check and see if you have a file called /etc/shells

This file contains a list of shells that are allowed on the system. If a shell is not defined in this, then it may not be allowed to ftp.

# cat /etc/shells

/sbin/sh
/bin/csh

[MarkW_1]

Here is the output:

# cat /etc/shells
/bin/ksh
/bin/sh

[Patrick Wallek · Accepted solution]

You'll need to change /etc/shells so that the shell that is defined for each user in /etc/passwd is in the /etc/shells file.

root's default shell should ALWAYS be /sbin/sh so that would need to be added to /etc/shells. Same for all other users.

[MarkW_1]

The /etc/shell file entries fixed the problem.

Thanks,

Mark