Subject: Anonymous Access Denied

From: Thomas Kiehl <[email-masked]>
Date: Fri, 14 Jun 1996 08:06:48 -0400

Hello All,

	I have recently gotten WU-ftpd running on a solaris 2.5 
machine running two virtual servers.  Atthis point I can
successfully connect to the machine at both addresses as a real
user, but I get an "Anonymous access denied" when I try to log in 
as anonymous. 
	
Here's a copy of my ftpaccess file..  any pointers would be greatly 
appreciated.

---------------

class b1   real,anonymous 3.1.4.*
class b2   real,anonymous 3.1.5.*

limit   b1   10   Any              /etc/msgs/msg.dead
limit   b2   10   Any            /etc/msgs/msg.dead

virtual 3.1.5.52  root        /virtual-servers/IP-3.1.5.52/ftp-root
virtual 3.1.5.52  banner /build/wu-ftpd/wu-ftpd-2.4.2-beta-11/3.1.5.52.banner
virtual 3.1.5.52  logfile /build/wu-ftpd/wu-ftpd-2.4.2-beta-11/3.1.5.52.logfile

virtual 3.1.6.173 root        /virtual-servers/IP-3.1.6.173/ftp-root
virtual 3.1.6.173 banner /build/wu-ftpd/wu-ftpd-2.4.2-beta-11/3.1.6.173.banner
virtual 3.1.6.173 logfile /build/wu-ftpd/wu-ftpd-2.4.2-beta-11/3.1.6.173.logfile

passwd-check trivial warn

readme  README*    login
readme  README*    cwd=*

message /welcome.msg            login
message .message                cwd=*

compress        yes             local remote
tar             yes             local remote

log commands real
log transfers anonymous,real inbound,outbound

shutdown /etc/shutmsg

email user@hostname

---

From: Shelly Feran <[email-masked]>
Date: Fri, 14 Jun 96 13:56:16 EDT

> user, but I get an "Anonymous access denied" when I try to log in 

	You've created a user "ftp" and set its shell to /bin/true?
	/bin/true exists in /etc/shells? 

	S.Feran, McGill University

---

From: Thomas Kiehl <[email-masked]>
Date: Fri, 14 Jun 1996 15:15:24 -0400

We are running a couple of virtual servers here via wu-ftpd.
Our goal is to have anonymous ftp access to the multiple virtual ftp
servers, but we would like to limit the domain which has access
to each of these virtual servers. 	
	i.e. we have server A and B running virtually on the same machine.  We
would like all of the users in 1.2.3.x  to be able to access A
anonymously (but not B) and all of the users in 1.2.4.x to be able to
access B anonymously (But not A).
	Currently, using Classes, we have classified each of the groups into
group1 and group2, now we would ideally just like to deny group2 from
getting into AServer A and deny group1 from getting into server B.
	I would just like to know if this is possible, and how would
one go about doing this.

Thanks,
T. Kiehl,  GE CR&D

---

From: Nina Burns-Pomeroy <[email-masked]>
Date: Sat, 22 Jun 1996 21:13:39 -0400 (EDT)

OK, here goes.  I have this funny feeling that my /etc/ftpaccess
file is not being read.  I know it's where it's supposed to be (ckconfig 
says so).  

1.  No .msg's appear upon login or any banner's either for that matter.
2.  The xferlog logs nothing.
3.  When I ftp to a virtual domain anonymously, it doesn't go to
    the correct ftp dir specified in the ftpaccess file.  It goes
    to the generic ftp dir.
4.  password restrictions don't kick in for anonymous user.
5.  ls -al still complains about the libraries for the anonymous
    user, but not a reg. user.  I've compiled ls in the bin dir
    and copied the needed libs according to truss.
    Hence, when I try:
		chroot ~ftp /bin/ls
    I get:      Killed                         

Any clues out there?  I'm running Solaris 2.5, wu-ftp-2.4.2-beta-11.
I've got the FAQ for wu-ftp memorized, too bad most of it doesn't apply 
b/c I'm running 2.4.2-beta-11.

Thanks,
N

---

From: [email-masked] (Bill Campbell)
Date: Mon, 24 Jun 1996 10:23:34 -0700 (PDT)

>file is not being read.  I know it's where it's supposed to be (ckconfig 
Current versions of wu-ftpd require the -a option to get it to read the
ftpaccess file.  Here's our inetd.conf for ftp (we use tcp_wrappers in
addition to the ftpd to control and monitor access).

ftp	stream tcp nowait NOLUID /usr/local/etc/tcpd /usr/local/etc/ftpd -a -l -L

This is from a SCO system so the NOLUID is probably SCO-specific.

Bill
--
INTERNET:   [email-masked]  Bill Campbell; Celestial Systems, Inc.
UUCP:               camco!bill  PO Box 820; 2835 82nd Avenue S.E. S-100
FAX:            (206) 232-9186  Mercer Island, WA 98040-0820; (206) 236-1676
URL: http://www.celestial.com/

The very powerful and the very stupid have one thing in common.
Instead of altering their views to fit the facts, they alter the facts
to fit their views ... which can be very uncomfortable if you happen to
be one of the facts that needs altering.
                -- Doctor Who, "Face of Evil"

---

From: Learning Resource Center <[email-masked]>
Date: Mon, 24 Jun 1996 15:11:15 -0500 (CDT)

> 2.  The xferlog logs nothing.
Same problem here with linux 1.3.100 Anyone got an answer?

Ryan
[email-masked]

---

From: [email-masked] (Koos van den Hout _U nix and we all_)
Date: Tue, 25 Jun 1996 15:06:38 +0200 (MET DST)

>From the FAQ for wu-ftpd beta versions
(http://www.hvu.nl/~koos/wu-ftpd-faq.html) :

5. Installing the wu-ftpd 

       In general, change the line for the ftp-server in /etc/inetd.conf
       (the file that defines the servers started by inetd. For some
       operating systems, this is another file). 

           1. Command-line options for wu-ftpd 

              With the latest versions, using no command-line options will
              set it to a default-mode, in which it will not parse the
              ftpaccess file. Add the option -a to the command line in
              inetd.conf. 

                                          Grtx KH

-- 
  Koos van den Hout,     Internetter, Unix freak, ISFJ and BBS SysOp at large
  [email-masked] (Home)        BBS Koos z'n Doos (+31-30-6036637 28k8)
  [email-masked] (Work)  <-- finger -l for PGPkey    (+31-30-6056619 14k4)
  http://www.hvu.nl/~koos (WWW)    Looking for a license plate with "RFC 822"
  Quando Omni Flunkis Moritati (If all else fails - play dead)     KH106-RIPE