Re: vsftpd setup question



Frank wrote:
Hello,


I try to config vsftpd according to my requirements
- one scenario is OK and the other fails.

May be it is best to simplify a little bit:
- it is OK with "user2"
- it fails with "user1"

What I see is that user2 has "/bin/sh" and
user1 has "/bin/false" in /etc/passwd

Does vsftpd really need a working shell ?
(the example is simplified; in reality I
want to use a custom program to start instead of /bin/sh
when login via ftp or ssh.

Not when I last used it. But I used a rather different layout: not user home
directories, but directories under /var/ftp/.


the wrong case
===============
ftp -vn 192.168.30.31
Connected to 192.168.30.31.
220 (vsFTPd 2.0.3)
530 Please login with USER and PASS.
530 Please login with USER and PASS.
KERBEROS_V4 rejected as an authentication type
ftp> user user1 CHGME.1
331 Please specify the password.
500 OOPS: priv_sock_get_result in privsock.c
Login failed.

the OK case
===========
ftp -vn 192.168.30.31
Connected to 192.168.30.31.
220 (vsFTPd 2.0.3)
530 Please login with USER and PASS.
530 Please login with USER and PASS.
KERBEROS_V4 rejected as an authentication type
ftp> user user2 CHGME.1
331 Please specify the password.
230 Login successful.

my vsftpd config file
=====================
local_enable=YES
write_enable=YES
nopriv_user=vsftpdnobody
anonymous_enable=NO

intesting lines from /etc/passwd
================================
user1:x:483:483:user1:/home/user1:/bin/false
user2:x:482:482:user2:/home/user2:/bin/sh
vsftpdnobody:x:1003:1003:vsftpd nopriv_user:/var/empty:/bin/false


.



Relevant Pages

  • vsftpd setup question
    ... I try to config vsftpd according to my requirements ... May be it is best to simplify a little bit: ... when login via ftp or ssh. ... 530 Please login with USER and PASS. ...
    (comp.os.linux.setup)
  • Re: vstfpd: Could not authenticate using local logins
    ... I am trying to configure vsftpd to setup a ftp server in a RHEL box. ... # Uncomment this to allow local users to log in. ... I am able to do a successful login with 'anonymous' ...
    (comp.os.linux.networking)
  • vstfpd: Could not authenticate using local logins
    ... I am trying to configure vsftpd to setup a ftp server in a RHEL box. ... # Uncomment this to allow local users to log in. ... I am able to do a successful login with 'anonymous' ...
    (comp.os.linux.networking)
  • Re: server hacked?
    ... I recently setup a RH8 machine ... > and put vsftpd 1.2 on it. ... > login is not allowed on this machine. ... down the FTP server via the VSFTP instructions, ...
    (comp.os.linux.security)
  • Re: vsftpd quesiton
    ... > users, who have login accounts on this machine, will be able to FTP ... Looking at the services config the vsftpd says: ... send an illegal ICMP 11 login message to ...
    (linux.redhat)