passwd ageing

[navin]

hello ,i set up passwd ageing for the root account .Even though the passwd has expired able to become root but could not ftp to the system using root account from other systems.Should i be able to use ftp once i reset the passwd ? how come i'm able to su with expired passwd.
thanks in advance.

[Khashru · Accepted solution]

can you make a new connection after your password expired? or you are using your connected terminal. If you are root and do a su then it will not check password file.

[navin]

i'm connecting in different terminal , su from normal to root account.
thanks

[Jaime Bolanos Rojas.]

Navin, are you using password ageing with a trusted system or non trusted.

If it is non-trusted please specified configuration to help you out.

Regards,

Jaime.

[Steven E. Protter]

Shalom,

ftp can be blocked for a totally different reason.

the ftpaccess file is commonly set to deny root access.

Why?

Because ftp transmits authentication data in clear text.

So when you ftp as user root you send the ROOT PASSWORD IN CLEAR TEXT.

So
ANYONE CAN READ IT AND GAIN ROOT ACCESS

This is considered a bad security practice.

Use ssh or telnet to validate the root account is active.

Use a different user account for ftp.

SEP