Can't login as anonymous?

Chowroc · 01-24-2005, 11:03 AM

I can't login vsftpd as anonymous, get:
Login failed: 500 OOPS: vsftpd: refusing to run with writable anonymous root
No matter xinetd or standalone mode.

I suspicious about the account of vsftpd process:
# ps aux | grep vsftpd
root 2453 0.0 0.3 1484 380 pts/0 S 01:05 0:00 vsftpd
Is there any influence of that? How can I change it?

thanks.

hitesh_linux · 01-24-2005, 12:08 PM

look for called vsftpd.conf under /etc/vsftpd/

follow the steps below.

Login as root user.

open console at console type

vi /etc/vsftpd/vsftpd.conf

search for following option and change with YES.

#Allow anoymous FTP?
anonymous_enable= YES

save & exit and try with following command.

ftp localhost

Hope this helps.

-/Hitesh

Chowroc · 01-24-2005, 04:50 PM

I of course have:
anonymous_enable= YES

I make user: ftp 's home to be /mnt/file/ftp (/mnt/file--/dev/hda8), and:
# chown ftp.ftp /mnt/file/ftp
# chmod 775 /mnt/file/ftp
I don't think this is the problem, because when I change it back to /var/ftp, the problem remains.

thanks.

hitesh_linux · 01-24-2005, 09:21 PM

U don't need to make any changes to login as anonymous, i do no know why this error u r getting.

what you can do is, try uninstall vsftpd package, reinstall it and try again. it's works for me as user as well as anonymous.

So try that and check.

-/Hitesh

Chowroc · 01-25-2005, 09:00 AM

I re-install vsftpd, and use the default /etc/vsftpd.conf, the problem remains :-(

still thank you.

hitesh_linux · 01-25-2005, 10:30 PM

just do one thing, post the deftails of vsftpd.conf, vsftpd.ftpuser and vsftpd_users files.

we will try to troubleshoot this issue.

-/Hitesh

Chowroc · 01-26-2005, 08:38 AM

This is the default vsftpd.conf:

anonymous_enable=YES
local_enable=YES
write_enable=YES
local_umask=022
dirmessage_enable=YES
xferlog_enable=YES
connect_from_port_20=YES
xferlog_std_format=YES
pam_service_name=vsftpd

I can't use anonymous with it.

/etc/vsftpd.ftpusers:
# Users that are not allowed to login via ftp
root
bin
daemon
adm
lp
sync
shutdown
halt
mail
news
uucp
operator
games
nobody

/etc/vsftpd.user_list:
root
bin
daemon
adm
lp
sync
shutdown
halt
mail
news
uucp
operator
games
nobody

I add a user like this: in /etc/passwd:
Qin:x:5001:5001::/mnt/file/ftp:/sbin/nologin
add Qin in vsftpd.chroot_list, and now I can just login as Qin, but still can't login as anonymous.

thanks.

hitesh_linux · 01-26-2005, 10:30 AM

OK, it seems all the configurations are ok.

r u trying to login from client? or on localhost?

try with the following command.

service vsftpd restart

ftp localhost

username: anonymous
password: press enter [do not enter password]

and check. if you get any error, post it here.

-/Hitesh

Chowroc · 01-26-2005, 11:40 AM

There is no script of vsftpd in my /etc/init.d/, I can only do this:
# killall vsftpd
# vsftpd start

then:
$ ftp localhost
Connected to localhost (127.0.0.1).
220 ready, dude (vsFTPd 1.1.0: beat me, break me)
Name (localhost:roc): anonymous
331 Please specify the password.
Password:
500 OOPS: vsftpd: refusing to run with writable anonymous root
Login failed.
421 Service not available, remote server has closed connection
ftp>

Chowroc · 01-26-2005, 11:42 AM

What's the means of "421"?

When I login successfully as an avialabe user, the number is "230": "230 Login successful"?

thanks

hitesh_linux · 01-26-2005, 12:24 PM

"421 service not available, remote server has closed connection.''

Means:

If an FTP server won't allow logins, it is probably configured correctly, but the problem is probably with authorizing users at login. FTP servers in current distriubtions often authorize users with the Pluggable Authentication Modules library, in which case there should be an authorization file /etc/pam.d/ftp. A generic authorization file looks like this. (The line break on the first "auth" line is for readability. The entry is actually a single, long line).

#%PAM-1.0
auth required /lib/security/pam_listfile.so item=user \
sense=deny file=/etc/ftpusers onerr=succeed
auth required /lib/security/pam_pwdb.so shadow nullok
auth required /lib/security/pam_shells.so
account required /lib/security/pam_pwdb.so
session required /lib/security/pam_pwdb.so

Also, make sure the /etc/ftpusers file, or whatever users file is named in the first "auth" line, is configured correctly.

just check this file for correct auth line.

Login as root user.

cat /etc/pam.d/vsftpd

which disctribution r u currently using? For it working like charm. i have tested on rHL 9 , RHEL 3 and SUSE.

any let try this, hope this helps.

-/Hitesh

Chowroc · 01-26-2005, 06:54 PM

This is my /etc/pam.d/vsftpd

Code:

#%PAM-1.0
auth       required     /lib/security/pam_listfile.so item=user sense=deny file=
/etc/vsftpd.ftpusers onerr=succeed
auth       required     /lib/security/pam_stack.so service=system-auth
auth       required     /lib/security/pam_shells.so
account    required     /lib/security/pam_stack.so service=system-auth
session    required     /lib/security/pam_stack.so service=system-auth

I don't think there is any problem. The /etc/pam.d/system-auth like this:

Code:

#%PAM-1.0
# This file is auto-generated.
# User changes will be destroyed the next time authconfig is run.
auth        required      /lib/security/pam_env.so
auth        sufficient    /lib/security/pam_unix.so likeauth nullok
auth        required      /lib/security/pam_deny.so

account     required      /lib/security/pam_unix.so

password    required      /lib/security/pam_cracklib.so retry=3 type=
password    sufficient    /lib/security/pam_unix.so nullok use_authtok md5 shado
w
password    required      /lib/security/pam_deny.so

session     required      /lib/security/pam_limits.so
session     required      /lib/security/pam_unix.so

My distribution: RH8.

Chowroc · 02-03-2005, 10:41 PM

What's the differences between the account which I set /sbin/nologin as the shell and the anonymous account?

Thank you.

hitesh_linux · 02-03-2005, 11:22 PM

i will try looking into nologin issue, but why don't you try with wu-ftpd.

visit the following link at,

http://www.wu-ftpd.org/wu-ftpd-faq.html

hope this helps you.

-/Hitesh