FTP Anonymous access

[dickohead]

Hey guys,

 

I can authenticate as a local user and gain access to my server fien, but am unable to login as anonymous.....

 

/etc/proftpd.conf

# This is a basic ProFTPD configuration file (rename it to 
# 'proftpd.conf' for actual use.  It establishes a single server
# and a single anonymous login.  It assumes that you have a user/group
# "nobody" and "ftp" for normal operation and anon.

ServerName 	 "Linux Box FTP Access"
ServerType 	 standalone
DefaultServer 	 on

# Allow FTP resuming.
# Remember to set to off if you have an incoming ftp for upload.
AllowStoreRestart  on

# Port 21 is the standard FTP port.
Port    21

# Umask 022 is a good standard umask to prevent new dirs and files
# from being group and world writable.
Umask    022

# To prevent DoS attacks, set the maximum number of child processes
# to 30.  If you need to allow more than 30 concurrent connections
# at once, simply increase this value.  Note that this ONLY works
# in standalone mode, in inetd mode you should use an inetd server
# that allows you to limit maximum number of processes per service
# (such as xinetd).
MaxInstances 	 30

# Set the user and group under which the server will run.
User    nobody
Group    nogroup

# To cause every FTP user to be "jailed" (chrooted) into their home
# directory, uncomment this line.
DefaultRoot ~

# Normally, we want files to be overwriteable.
<Directory />
 AllowOverwrite  on
</Directory>

# Needed for NIS.

PersistentPasswd              off

# Default root can be used to put users in a chroot environment.
# As an example if you have a user foo and you want to put foo in /home/foo
# chroot environment you would do this:
#
# DefaultRoot /home/foo foo

#Set root directory for Anonymous user

<Anonymous /var/ftp>

AnonRequirePassword off
#set the user and group for "anonymous" access
User ftp
Group ftp
RequireValidShell off
#alias "anonymous" login to "ftp"
UserAlias anonymous ftp

#restrict "Anonymous" from writing to anything
<Directory *>
 <Limit WRITE>
 DenyAll
 </Limit>
</Directory>

</Anonymous>

 

Now that all seemd fine and dandy.... but whren i try and connect:

[root@localhost root]# ftp 192.168.1.111
Connected to 192.168.1.111.
220 ProFTPD 1.2.9 Server (Linux Box FTP Access) [linuxbox]
500 AUTH not understood
500 AUTH not understood
KERBEROS_V4 rejected as an authentication type

 

I am confused?! i have seen a few problems on the internet with access and KERBEROS_V4 authentication, but i know nothing about it, and cannot find anything useful about it.... has anyone had this issue and know of a solution?

 

Many thanks in advance!! :woops:

 

Dickohead.

Edited November 15, 2004 by dickohead

[arthurking]

Hi again Dicko!

I'm not a ftp server admin or anything, I just needed something to do!

I had problems with Proftp. I've given up on it for now, but will come back to it soon.

My problems were not with Kerberos authentication,

*** have you created the anon/ftp user on your system? ***

ie. you have your root user, then you have your 'dicko' user, and now you have to create a (super-duper access limited) anonymous or ftp user I called him anonymous, and place him in the 'ftp users' group.

I forget the exact steps I did, but got him access...........of sorts.

My problems were, when connected as anonymous and using any GUI ftp program, I couldn't see any of the files or directories I'd created.

If I used the ftp on the Command Line I had no problems seeing stuff, I just hate the CLI :o

One point to watch is the pro ftp config file you are using will only give your anonymous user access to the /var/ftp dir. (ps this took me 2 days to figure out )

Do you want to only access the server as anonymous?

There are ready made config files on the ProFTP website.

I also played with webmin for configuration and then Gproftp a ProFTP gui configurator,

Mind you I only did this for something to do.........as we do

 

good luck and cheers.