unable to use ftp

[itai weisman]

hi everyone
i'm trying to connect to my RHEL 3 AS ( 2.4.21-9.ELsmp) by ftp.
I can't connect, i always receive a message that sais
220 pixie FTP server (Version 5.60) ready.
User (pixie:(none)): itaiwe
530 Must perform authentication before identifying USER.
Login failed.

it doesn't relate to vsftp.user_list or vsftp.ftpusers, i recieve this message for any user i'm trying to connect with.

i compared this system to another system that works, and they both have the same packaes installed:
#rpm -qa | grep ftp
lftp-2.6.3-5
tftp-server-0.32-4
tftp-0.32-4
ftp-0.17-17
gftp-2.0.14-2
vsftpd-1.2.0-4
#chkconfig --list | grep ftp
vsftpd 0:off 1:off 2:on 3:on 4:on 5:on 6:off
gssftp: on
tftp: on

any idea, anyone?

[Steven E. Protter]

authentication for ftp occurs off the actual user list in /etc/passwd

The user must exist there.

cd /etc/xinetd.d

vi one of these three files

gssftp

vsftp

make sure the default disable=yes is changed to disable=no


That at least lets the service start.

I suspect that vsftp is your default ftpd server.

If I am right, try this.

chkconfig -level 5 vsftpd on
service vsfptd start

Then try and ftp.

This is the most likely area to look at to track down the problem.

SEP

[itai weisman]

hello and thanks,
the user i'm trying to ftp with (root), exist in passwd.
i have only gssftp in /etc/xinetd.d (what is the third file you were writing about?)
and in this file disable=no was already written.
it still doesn't work

[Steven E. Protter]

root user is disabled for ftp in Linux.

The reason is that its a security hazard, specifically that ftp transmits authentication information in clear text. If you ftp with root you are taking a serious risk.

Please try another user.

There is a file called ftpaccess or ftpuser that lists the users banned from using ftp.

Please try this instead.

sftp hostname

sftp part of openssh will work just like command line ftp and it does authentication in a secure way.

SEP

[Vitaly Karasik_1]

Itai,

1) your vsftp server is OK [it's standalone server, so it doesn't run under xinetd]

2) according to greeting message we see ["FTP server (Version 5.60)"] it seems like some another [not vsftp] ftp server runs on your linux box [probably with Kerberos authentication?]
please check your logfiles for more info.

[Vitaly Karasik_1]

Shalom, Itai,

You should stop gssftp service, which uses Kerberos for authentication:

chkconfig gssftp off

Rgds,
Vitaly