SUMMARY:Proftpd strangeness

From: Tru64 User (tru64user@yahoo.com)
Date: Tue Jul 09 2002 - 11:40:50 EDT


I received an idea from proftpd site to run trace. I
ran a trace on ftp as user was logging on, and
realized one differentiating factor between us. This
user had a 10 char passwd.
Changing it to 7 chars(haven't tried other higher
numbers)works like a charm. So now i will be back on
proftpd site to figure out how to enable it to take
whatever passwd the unix side accepts (if possible, or
simply limit our passwd lengths).

_Thanks

Richard

Original Post::

Greetings,

Been unable to deduce where problem might be, need
ideas......

Tru64 v4.0G, pk#3, Enhanced security
proftpd-1.2.5 and tru64 ftpd (running from inetd, not
at the same time ofcourse)

Problem::
a particular user changed her passwd (thru regular
"passwd") --No Problem.
She can log in fine thru ssh, telnet, cde, but not
proftpd ftp, gets error 530: Incorrect Password.
Logs show same thing, (Login failed):Incorrect
password.

However, when I switch from proftpd to ftpd (in
inetd.conf file, commenting one and uncommenting
another, then restarting ofcourse), she can log in
fine thru ftpd.

I tried changing my passwd to duplicate problem, but
everything works fine for me. No problems with either
proftpd or ftpd.
Shell is bash-2.05
proftpd compiled with tcp-wrappers and a custom prefix
only.

What am i missing?
Apart from this individual user, everything is OK so
far.

***Debug Info***from proftpd -d9 -n
- ROOT PRIVS at mod_auth.c:1266
node.name(node.name [xxx.xxx.xxx.xxx]) - RELINQUISH
PRIVS at mod_auth.c:1317
node.name(node.name [xxx.xxx.xxx.xxx]) - ROOT PRIVS at
mod_unixpw.c:482
node.name(node.name [xxx.xxx.xxx.xxx]) - RELINQUISH
PRIVS at mod_unixpw.c:530
node.name(node.name [xxx.xxx.xxx.xxx]) - USER blackwl
(Login failed): Incorrect password.
node.name(node.name [xxx.xxx.xxx.xxx]) - dispatching
LOG_CMD_ERR command 'PASS (hidden)' to mod_log
node.name(node.name [xxx.xxx.xxx.xxx]) - dispatching
PRE_CMD command 'SYST' to mod_core
node.name(node.name [xxx.xxx.xxx.xxx]) - dispatching
LOG_CMD_ERR command 'SYST' to mod_log
node.name(node.name [xxx.xxx.xxx.xxx]) - dispatching
PRE_CMD command 'QUIT' to mod_core

********proftpd config file*******

ServerType inetd
DefaultServer on
ServerIdent on "HOST FTP Server"
DisplayConnect /proftpd/var/.motd
UseReverseDNS on
LogFormat default "%h %l %u %t \"%r\" %s %b"
LogFormat auth "%v [%P] %h %t \"%r\" %s"
LogFormat write "%h %l %u %t \"%r\" %s %b"

<Global>
ExtendedLog /var/adm/syslog/access.log WRITE,READ
write
ExtendedLog /var/adm/syslog/auth.log AUTH auth
</Global>

AccessGrantMsg "Access granted"

Port 21
Umask 022

MaxInstances 10

User xxxxxx
Group xxxxxx

<Directory /*>
  AllowOverwrite on
</Directory>
<Limit SITE_CHMOD>
        DenyAll
</Limit>

=====

__________________________________________________
Do You Yahoo!?
Sign up for SBC Yahoo! Dial - First Month Free
http://sbc.yahoo.com



This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:48:46 EDT