RE: RedHat ES3.0--I will pay

Some success!  Was able to use strace (debug mode for ftpd and xinetd
did not help) to find out where the problem was...now need to figure out
how to fix it.

On RedHat ES3, because it uses xinetd, here's how you have to configure
xinetd to use strace:

  xinetd uses the files in /etc/xinetd.d to start services such as ftp.
In the file in that directory, it calls the ftp program.  However, you
can't put strace in there cuz it only wants one argument.  So, I created
a script that calls strace that in turn runs ftpd which gave a great
debug file: /usr/bin/strace -vf -o outputfile /usr/sbin/ftpd -a.

What I've found is that after entering the passwd, ftpd looks to
/etc/pam.d (which it finds) then to /etc/pam.d/ftp (which it doesn't
find).  Then it looks to /etc/pam.d/other, which it finds.  Then, it
looks up some pam libraries, ends on /lib/security/pam_deny.so and
finally sends a login incorrect to the client.

Question is, how do I make it NOT use pam and use shadow?  I compiled
this ftp like I did all the others on Suse and Solaris, and they worked
fine...

-----Original Message-----
From: Gregory Hicks [mailto:[email protected]]=20
Sent: Thursday, December 01, 2005 10:13 AM
To: [email protected]; Thompson, Victor E
Subject: Re: RedHat ES3.0--I will pay


> Subject: RedHat ES3.0--I will pay
> Date: Thu, 1 Dec 2005 08:49:25 -0700
> From: <[email protected]>
> To: <[email protected]>
>=20
> For someone's service if they can provide assistance to get my guest=20
> users working.  The exact same ftpaccess and configuration (of course=20
> I compiled ftpd on this box) works fine on Suse 9, and Solaris 8.
> anonymous user works great, gets the proper banner, everything works.
> The guest user, no matter what I do, will not logon:

What kind of shell does the guest user have?  Is it listed in
/etc/shells?

>=20
> Y:\>ftp bosftp1
> Connected to bosftp1.bc.com.
> 220 Boise FTP server ready.
> User (bosftp1.bc.com:(none)): xxxxx
> 331 Password required for xxxxx.
> Password:
> 530 Login incorrect.
> Login failed.
> ftp>
>=20
> Has ANYONE got guest users to work on ES3.0?

-------------------------------------------------------------------
Gregory Hicks                        | Principal Systems Engineer
Cadence Design Systems               | Direct:   408.576.3609
555 River Oaks Pkwy M/S 6B1          | Fax:      408.894.3400
San Jose, CA 95134                   | Internet: [email protected]

I am perfectly capable of learning from my mistakes.  I will surely
learn a great deal today.

"A democracy is a sheep and two wolves deciding on what to have for
lunch.  Freedom is a well armed sheep contesting the results of the
decision." - Benjamin Franklin

"The best we can hope for concerning the people at large is that they be
properly armed." --Alexander Hamilton