Help! I've broken ftp!!!

[Kris Spander]

Hello Experts,

I have been ordered to make ftp more secure. It's supposed to not show the version and issue a warning message. I have that part working but now nobody can use ftp. What did I do wrong?
Every login is invalid; I can't even run ftp as root.

TIA, Kris

[A. Clay Stephenson · Accepted solution]

Hi Kris:

I assume that you added an ftpaccess that looks something like this and added the -a option to ftpd in /etc/inetd.conf:

suppressversion yes
banner /etc/issue

My best guess is that you need to add a class entry to your ftpaccess file as well.

At a minimum something like:
class realusers real *

Add that and see if you can now use ftp. You may want a more restrictive addrglob than '*'.

Man ftpasccess for details.

Regards, Clay

[A. Clay Stephenson]

Ooops, my advanced one finger hunt-and-peck typing technique failed me again. That should be "man ftpaccess for more details".

[Wilfred Chau_1]

Did you implement /etc/ftpd/ftpusers?

[Kris Spander]

My ftpusers is a zero length file. If I understand how it works then nobody should be excluded.

[A. Clay Stephenson]

Wilfred makes a good point but I assumed that you had a null ftpusers file; that may have been a very silly assumption. I'm still betting on a class entry being needed. You don't even have to restart ftpd; the next session will see these new entries in ftpaccess.

[Kris Spander]

Hi Clay,

That worked a treat! FTP now allows me to login.

Thanks a bunch for the quick help
Kris

[Jeff Schussele]

Hi Kris,

I agree w/Clay...especially if your ftpusers file is null.
Check /usr/newconfig/etc/ftpd/ftpaccess for the proper way to use the class statement in there. I suspect you're missing it or it's malformed.

Rgds,
Jeff