ftp using Kerberos can not authenticate login

[Randy Hagedorn]

Hi,

I am trying to use FTP to a RHEL 5 HP Blade Server, but am having difficulty due to an authentication error. Even if I try to ftp to itself I get the same following login failure:

# ftp
ftp> open hostname
Connected to hostname.
220 hostname FTP server (Version 5.60) ready.
334 Using authentication type GSSAPI; ADAT must follow
GSSAPI accepted as authentication type
GSSAPI error major: Unspecified GSS failure. Minor code may provide more inform
ation
GSSAPI error minor: Unknown code krb5 195
GSSAPI error: initializing context
GSSAPI authentication failed
334 Using authentication type KERBEROS_V4; ADAT must follow
KERBEROS_V4 accepted as authentication type
Kerberos V4 krb_mk_req failed: You have no tickets cached
Name (robin:root): username
530 Must perform authentication before identifying USER.
Login failed.
Remote system type is UNIX.
Using binary mode to transfer files.
ftp>

Does anyone have any ideas, as to what I can check?

Thanks,
Randy

[Steven E. Protter · Accepted solution]

Shalom,

By default, root is disabled for ftp in the vsftpd daemon.

See /etc/vsfptd/vsftpd.conf and other configuration files if you want to risk enabling root ftp

SEP

[Randy Hagedorn]

In our particular case, since we are using gssftp, we changed file /etc/xinetd.d/gssftp and removed the -a option from the server_args parameter. This removes the requirement of authentication of logins.

Randy