Password Authentication works for TELNET... but not FTP

GEEXTER · 07-25-2003, 12:16 PM

I am able to telnet to my redhat 7.2 server and the password for my user is authenticated and I'm allowed access.

But... when I FTP to the same server I get the following:

Resolving host name 10.80.20.40...
Connecting to (10.80.20.40).
Connected to (TLVGE01) -> IP: 10.80.20.40 PORT: 21.
Socket connected waiting for login sequence.
220 TLVGE01 FTP server (Version wu-2.6.1-18) ready.
USER quikplay
331 Password required for quikplay.
PASS (hidden)
530 Login incorrect.

Why would the user password work for telnet but not for FTP?

Is this a common problem?

youngstorm · 07-25-2003, 09:28 PM

can you ftp in as some other user?
wow, this is an intresting problem

Corin · 07-26-2003, 12:26 AM

Is the user listed in the /etc/ftpusers file?

Users listed in that file are disabled from using the ftp server.

Also another possibility -- are you using PAM?

There are, or should be, pam configuration files in /etc/pam.d
for both telnet and ftp.

And thirdly, DO NOT use telnet and ftp. You should have set up SSH and be using slogin and sftp.

GEEXTER · 07-30-2003, 12:04 PM

< can you ftp in as some other user? >

Nope.

< Is the user listed in the /etc/ftpusers file? >

No... the user is not listed in ftpusers.

< Also another possibility -- are you using PAM? >

Nah... we're not using PAM.

Any other suggestions? Anyone?

youngstorm · 07-30-2003, 01:14 PM

Check your TCP wrappers. Also consider using sftp as Corin suggested.

Corin · 07-30-2003, 04:50 PM

Good point.

TCP Wrappers control comes in the form of

/etc/hosts.allow and /etc/hosts.deny.

You should have any entry

ALL:ALL in /etc/hosts.deny and then add the hosts which which
you want to allow access to services to /etc/hosts.allow

The file below is allows access to localhost plus everything
on the local network 192.168.1

#*****************************************************************************#
#
# file: /etc/hosts.allow
#
#*---------------------------------------------------------------------------*#
#
ALL: 127.0.0.1 192.168.1.0/255.255.255.0
gdm: 127.0.0.1 192.168.1.0/255.255.255.0
portmap: 127.0.0.1 192.168.1.0/255.255.255.0
sendmail: 127.0.0.1 192.168.1.0/255.255.255.0
#
#*****************************************************************************#

Change as appropriate for your network and or list of hosts.