Redhat 9.0 telnet & ftp problems

supermyself · 06-09-2005, 01:09 PM

Quote:

Im not able to login throught telnet as root?

That's because of security consideration.
I suggest you login throught telnet as user and then su to root.

Of course you could allow others to telnet to your linux as root by correct configurations.
But I forgot how...

dylan912 · 08-26-2005, 03:32 AM

mv /etc/securetty /opt/

- dylan912

Quote:

Originally posted by devilzgaze
Im not able to login throught telnet as root?

any ideas where to check for it?

kadhiravan.r · 12-30-2005, 10:53 AM

good..

Move /etc/securetty file to some other place.

kadhirava.R

hodge · 12-04-2006, 10:27 PM

1.I modify the disable=no
2.mv /etc/securetty /etc/securetty.bak,
3.vi /etc/pam.d/login and mark the first line
'#auth required pam_securetty.so
auth required pam_stack.so service=system-auth'
4./etc/init.d/xinetd restart
OK
5.chkconfig --list
gssftp: off
daytime-udp: off
krb5-telnet: on
time-udp: off
but when I use root user to telnet,report
login: root
Password for root:
Login incorrect
and use other user,can login with telnet.

Can you tell me how to root login?????
thank you

keen4linux · 04-27-2007, 04:32 AM

Quote:

Originally Posted by gurdip

Hi,

I too have a 530 error on my Redhat machine using webmin.

I have included some possibly relevant info below:

rpm -qa | grep -i ftp
lftp-3.0.6-3
ftp-0.17-22
vsftpd-2.0.1-5

Do I need to install a ftp daemon? Not sure if it is installed and if it is not, I have no idea how to install it!

Under Extended Internet Service -> FTP, the service program appears as : /usr/kerberos/sbin/ftpd -l

Contents of gssftp

# default: off
# description: The kerberized FTP server accepts FTP connections \
# that can be authenticated with Kerberos 5.
service ftp
{
flags = REUSE
log_on_failure += USERID
socket_type = stream
user = root
server = /usr/kerberos/sbin/ftpd
server_args = -1
wait = no
}

I restarted xinetd service when I made changes.

After removing the -a as mentioned in the posts above, ftp connection produces this error:

connecting to 202.71.98.48 ...
Connected to 202.71.98.48 port 21
ftpd: invalid option -- 1
ftpd: Unknown flag -1 ignored.
220 www.mydomain.com FTP server (Version 5.60) ready.
! Receive error: Blocking call cancelled

! Connection failed

The "-1" is being ignored for some reason.

Please help!

Thanks in advance.

The value of "server_args" should be set to '-l' not '-1'. I think this is the only problem.

All the best

yowalter · 12-04-2007, 10:14 PM

You must use :
ftp -u <ftp site>
when loggin .. use PASSIVE command

example:

$ ftp -d -t -u ftp.example.gov.ar
Connected to ftp.example.gov.ar.
220 ns1 Microsoft FTP Service (Version 5.0).
---> SYST
530 Please login with USER and PASS.
ftp>
ftp> user
(username) example
---> USER example
331 Password required for example.
Password:
---> PASS XXXX
230 User example logged in.
ftp> passive
Passive mode off.
ftp>

Regards

Dunhill · 09-22-2008, 07:57 AM

I am not using FTP on redhat 9 at the moment, I am using SFTP on RHEL 5.

I initially also have problem when using FTP on RHEL 5. SELINUX banned FTP access into the home directory and considered it as an intrusion attack.

(I found this thread when I troubleshooting my problem, I just realized it is several years ago... )

In my case, I can disable the SELINUX and force FTP to work. However, after I found out I can use SFTP to log into my Linux, I used it.

If everything else, for example:

1. no firewall,
2. ftp server like vsftpd is on, and
3. ftp clients like gssftp is not automatically active

is correct, do u wanna a try disabling SELINUX, temporarily?

Just for ur info, because I did not think SELINUX caused my FTP fail when I use RH 9 a couple of years ago.

chrism01 · 09-22-2008, 07:24 PM

SELINUX didn't exist when RH9 came out....

Dunhill · 09-24-2008, 08:46 AM

Quote:

Originally Posted by chrism01

SELINUX didn't exist when RH9 came out....

I did not reliaze that... Too long did not use RH9 already... LOL

Hope our friend has solved his problem. Just now I double checked seems this problem is really a few years away from now liao..

pkrishna2k · 07-22-2009, 06:37 AM

edit the file /etc/securetty

#vi /etc/securetty

vc/1
vc/2
vc/3
vc/4
vc/5
vc/6
vc/7
vc/8
vc/9
vc/10
vc/11
tty1
tty2
tty3
tty4
tty5
tty6
tty7
tty8
tty9
tty10
tty11
pts/0 ---- add this line
pts/1 ---- add this line

esc:
:wq

Enjoy

4L3X · 06-22-2010, 02:40 PM

I personnaly solved this (under Red Hat Entreprise AS release4 ) by editing this file:

vi /etc/security/pam_winbind.conf

and changing Kerberos identification to "no"
;krb5_auth = no

Then reboot the server

John VV · 06-22-2010, 06:17 PM

4L3X ?? you do know that this is a 6 year old thread ????
and for the dead rh9 not RHEL4

4L3X · 06-23-2010, 08:57 AM

Ouch!

I've seen that, but you also can see answers from less than a year / and I did not find answers elsewhere.

Feel free to delete if you think the post lacks information and is polluting somehow