Subject: remote login fails

From: Y Babu <[email-masked]>
Date: Thu, 27 May 1999 03:46:24 +0000 (GMT)

Hello there,
  
 I have upgraded from 2.4.2-BETA-15 to the current 2.5.0
 ftp works fine in localhost allowing real users. 
 But in the remote mode it allows only anonymous, for the real users
 it is failing on login, says 'login incorrect'
 
 My ftpaccess look like in the following way
 
 class anon anonymous *
 class all real,guest,anonymous *
 class remote real,guest,anonymous *

 Please help me
 
 Thanks.
 
 Yoga Babu.

---

From: Y Babu <[email-masked]>
Date: Thu, 27 May 1999 13:38:28 +0000 (GMT)

Thanks,
> 
> All anonymous users will be 'anon'
> All read and guest users will be 'all'
> No user will ever be 'remote'
> 
> The specific cause for "login incorrect" is in your system log.
> 

The system log follows:

May 27 13:31:23 raj ftpd[22785]: VirtualFTP Connect to: localhost [209.224.145.93]
May 27 13:31:23 raj ftpd[22785]: FTP session closed
May 27 13:31:27 raj ftpd[22788]: VirtualFTP Connect to: localhost [209.224.145.93]
May 27 13:31:38 raj ftpd[22788]: FTP LOGIN FAILED (virtual host access denied) for luxmi.demon.co.uk [194.222.207.144], babu

How can i sort this ?

Regards
Yoga Babu

---

From: Gregory A Lundberg <[email-masked]>
Date: Thu, 27 May 1999 08:54:59 -0400 (EDT)

On Thu, 27 May 1999, Y Babu wrote:

> I have upgraded from 2.4.2-BETA-15 to the current 2.5.0 ftp works fine
> in localhost allowing real users.  But in the remote mode it allows
> only anonymous, for the real users it is failing on login, says 'login
> incorrect'
> 

-- 

Gregory A Lundberg              Senior Partner, VRnet Company
1441 Elmdale Drive              [email-masked]
Kettering, OH 45409-1615 USA    1-800-809-2195

---

From: Gregory A Lundberg <[email-masked]>
Date: Thu, 27 May 1999 10:12:37 -0400 (EDT)

> May 27 13:31:38 raj ftpd[22788]: FTP LOGIN FAILED (virtual host access denied) for luxmi.demon.co.uk [194.222.207.144], babu

the concept in 2.5.0 is that virtual hosts are to be used only by
anonymous users and by guest users who have the same chroot as the virtual
host's root.

to disallow anonymous users on the virtual host, use the following syntax:
  virtual <address> private
in your case
  virtual 209.224.145.93 private

to allow or deny guest or real access on the virtual server, use the
following syntax:
  virtual <address> allow <username> [<username>...]
  virtual <address> deny <username> [<username>...]
wildcards are allowed here.  the default case is to deny all real and
guest users (as you've found out).  So, you could user something like:
  virtual 209.224.145.93 allow *
then, for grins, insert the following _before_ the allow * line:
  virtual 209.224.145.93 deny babu

to disallow anonymous access on the default (non-virtual) server while
allowing it on virtual servers, use:
  defaultserver private

to disallow specific users on the default (non-virtual) server while
allowing them on virtual servers, use:
  defaultserver deny <username> [<username>...]
  defaultserver allow <username> [<username>...]

So .. pulling it all together:

  Our real server is 172.16.0.1
  We have two virtual servers: 192.168.1.1 and 192.168.2.1

Let's close the default server to all users _except_ babu

Let's only allow anonymous access on 192.168.1.1
We'll allow babu here, too.

Let's only allow real and guest on 192.168.2.1
But babu is not allowed here

  defaultserver private
  defaultserver allow babu
  defaultserver deny *
  virtual 192.168.1.1 allow babu
  virtual 192.168.2.1 private
  virtual 192.168.2.1 deny babu
  virtual 192.168.2.1 allow *

--