Unable to FTP as user but can FTP as Root
 

Hi All,

I have Red Hat Enterprise Linux ES release 3 (Taroon Update 2)Kernel 2.4.21-15.EL on an x86_64

I am unable to FTP as user but able to FTP through root user.

Pl. let me know any specific settings has to be done.

Raghav

give us more details.
which ftp server do you use?
paste your conf file here.

My /etc/vsftpd/vsftpd.conf file shows this

anonymous_enable=NO
local_enable=YES
write_enable=YES
local_umask=022
dirmessage_enable=YES
xferlog_enable=YES
connect_from_port_20=YES
xferlog_std_format=YES

pam_service_name=vsftpd
userlist_enable=YES
listen=YES
tcp_wrappers=YES

My Command # rpm -qa | grep -i ftp shows

gftp-2.0.14-2
tftp-server-0.32-4
lftp-2.6.3-5
tftp-0.32-4
ftp-0.17-17
vsftpd-1.2.1-3

this is pretty odd, I am not sure but vsftpd doesnt allow the root user to login.
could just paste in the banner that you get when you type
ftp localhost

This shows when i give ftp localhost -

[root@GELINUX root]# ftp localhost
Connected to GELINUX.
220 GELINUX FTP server (Version 5.60) ready.
334 Using authentication type GSSAPI; ADAT must follow
GSSAPI accepted as authentication type
GSSAPI error major: Miscellaneous failure
GSSAPI error minor: No credentials cache found
GSSAPI error: initializing context
GSSAPI authentication failed
334 Using authentication type KERBEROS_V4; ADAT must follow
KERBEROS_V4 accepted as authentication type
Kerberos V4 krb_mk_req failed: You have no tickets cached
Name (localhost:root): root
331 Password required for root.
Password:
230 User root logged in.
Remote system type is UNIX.
Using binary mode to transfer files.

One more thing to clarify, after i removed the -a parameter from gssftp , i was able to ftp as root, before that i was not able to ftp even as root.

Pl. look onto my gssftp file

# default: off
# description: The kerberized FTP server accepts FTP connections \
# that can be authenticated with Kerberos 5.
service ftp
{
disable = no
flags = REUSE
socket_type = stream
wait = no
user = root
server = /usr/kerberos/sbin/ftpd
server_args = -l
log_on_failure += USERID
}

see you arent using VSFTP here, its gssftp. search for its config file and edit that properly, or disable gssftp and use vsftp.