LinuxQuestions.org
Help answer threads with 0 replies.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Server
User Name
Password
Linux - Server This forum is for the discussion of Linux Software used in a server related context.

Notices


Reply
  Search this Thread
Old 03-11-2009, 12:37 PM   #1
Gethyn
Member
 
Registered: Aug 2003
Location: UK
Distribution: (X)Ubuntu 10.04/10.10, Debian 5, CentOS 5
Posts: 900

Rep: Reputation: 32
FTP server that accepts any username and password


Hi everyone,

Sorry if this has been answered before, I've been looking around but not managing to come up with anything.

I have a bit of a weird situation. I'm doing some work on a mainframe system via VPN from an Ubuntu desktop. Occasionally it is necessary to export data from the mainframe to work on locally. This works through a bit of a kludge: so far as I can tell, the mainframe makes an FTP connection to the client computer, giving the username of the current (mainframe) user and password PASS.

In Windows there is a client program that allows the user to start a mini FTP server that receives the data. However, I haven't been able to find the same thing for Linux. Since it's just standard FTP protocol, I figured it should be possible to set up a server in Linux and configure it to accept the connections, as I've set up more standard FTP servers before.

However, I hit some snags. Using local users isn't possible because I can't create them with passwords of less than 6 characters. Using virtual/guest users seems to be very complicated, I had a go at that but got stuck (with vsftpd) on creating a PAM auth file. I'd really prefer something much simpler. I'm thinking along the lines of an FTP server that accepts connections given *any* username and password. I know that's extremely bad security practice, but it will be running on a secure office network over VPN, and I plan to keep it stopped by default and only start it when I need to transfer some data.

Does anyone have suggestions as to how I might do this? All the information I've been able to find is either for very basic anonymous FTP servers, or massively complicated (and properly secured) virtual user type setups.

Thanks in advance!
 
Old 03-11-2009, 02:11 PM   #2
TB0ne
LQ Guru
 
Registered: Jul 2003
Location: Birmingham, Alabama
Distribution: SuSE, RedHat, Slack,CentOS
Posts: 27,461

Rep: Reputation: 8115Reputation: 8115Reputation: 8115Reputation: 8115Reputation: 8115Reputation: 8115Reputation: 8115Reputation: 8115Reputation: 8115Reputation: 8115Reputation: 8115
Quote:
Originally Posted by Gethyn View Post
Hi everyone,

Sorry if this has been answered before, I've been looking around but not managing to come up with anything.

I have a bit of a weird situation. I'm doing some work on a mainframe system via VPN from an Ubuntu desktop. Occasionally it is necessary to export data from the mainframe to work on locally. This works through a bit of a kludge: so far as I can tell, the mainframe makes an FTP connection to the client computer, giving the username of the current (mainframe) user and password PASS.

In Windows there is a client program that allows the user to start a mini FTP server that receives the data. However, I haven't been able to find the same thing for Linux. Since it's just standard FTP protocol, I figured it should be possible to set up a server in Linux and configure it to accept the connections, as I've set up more standard FTP servers before.

However, I hit some snags. Using local users isn't possible because I can't create them with passwords of less than 6 characters. Using virtual/guest users seems to be very complicated, I had a go at that but got stuck (with vsftpd) on creating a PAM auth file. I'd really prefer something much simpler. I'm thinking along the lines of an FTP server that accepts connections given *any* username and password. I know that's extremely bad security practice, but it will be running on a secure office network over VPN, and I plan to keep it stopped by default and only start it when I need to transfer some data.

Does anyone have suggestions as to how I might do this? All the information I've been able to find is either for very basic anonymous FTP servers, or massively complicated (and properly secured) virtual user type setups.

Thanks in advance!
Try turning on anonymous users. The user ID will be "anonymous", and password will be whatever. That may help some...
 
Old 03-11-2009, 04:16 PM   #3
Gethyn
Member
 
Registered: Aug 2003
Location: UK
Distribution: (X)Ubuntu 10.04/10.10, Debian 5, CentOS 5
Posts: 900

Original Poster
Rep: Reputation: 32
Thanks, unfortunately that doesn't get round the problem. Vsftpd (for example) is configured for anonymous access out of the box on Ubuntu, but the mainframe doesn't want to access anonymously, it insists on sending a username! What the people who designed the system were thinking I don't know.

I have managed to find a way round the problem, which is not optimal in a number of ways, but I thought it might be of interest to some so I'll explain what I did. The key was using a Java based ftp server called CrossFTP server. It has a pretty straightforward GUI configuration system, that allows virtual users with silly passwords like "PASS". The complication with it is that to get it to bind to port 21 it has to be run as root, but it's designed to be run through Java web start, which should be run as a regular user.

I really, really don't suggest anyone does this for a site on an untrusted network or for a proper FTP site, but I launched it as root using the command
Code:
user@local:~$ sudo javaws http://www.crossftp.com/crossftpserver.jnlp
Once it was launched it was simple to add in the FTP users the mainframe wanted to use, complete with weak passwords, and give them write access to a directory created just for receiving this data.

This doesn't answer the original question, but it enabled me to get things working. Of course, it requires root access on the local machine, and requires Java to be installed (I used the Ubuntu standard release of Sun Java 6, haven't tested any others), but I can live with that. Hope it helps other people!
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
How to reset ftp username and password on fedora core teamsar Linux - Server 2 08-19-2008 11:11 PM
Configure the unix/linux server to use windows username and password sunhui Linux - Software 4 07-06-2006 10:36 AM
Mount ftp with nfs using username and password? Nuvious Linux - Networking 1 05-17-2006 11:44 AM
Network Server username and password cache linuxzouk Linux - Networking 7 06-02-2004 09:08 AM
username and password for proxy (ftp install) dutty Mandriva 0 05-19-2004 01:24 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Server

All times are GMT -5. The time now is 06:00 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration