Solved

sublogin in anonymous ftp using user command

Posted on 1998-10-12
6
478 Views
Last Modified: 2013-12-23
With  wu-ftpd,  when  anonymous  users  ftp in  and  try a
sublogin with the "user"  command, they get this  message:
Can't change user from guest login.

Is there a way to allow sublogins for anonymous ftp?

Are there any  security  issues by allowing  sublogins  in
anonymous ftp?.
0
Comment
Question by:dhana
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
6 Comments
 

Author Comment

by:dhana
ID: 1582436
Edited text of question
0
 

Author Comment

by:dhana
ID: 1582437
Expecting the answer?
0
 
LVL 2

Expert Comment

by:squint
ID: 1582438
# man ftpaccess

....

     guestgroup <groupname> [<groupname> ...]
          If a REAL user is a member of any of  <groupname>,  the
          session  is  set  up exactly as with anonymous FTP.  In
          other words, a chroot() is done, and  the  user  is  no
          longer  permitted  to issue the USER and PASS commands.
          <groupname> is a valid group from /etc/group (or  wher-
          ever your getgrent() call looks).

....


0
Are You Using the Best Web Development Editor?

The worlds of web hosting and web development are constantly evolving. Every year we see design trends change, coding standards adapt and new frameworks/CMS created. With such a quick pace of change it’s easy to get lost trying to keep up.

See if your editor made the list.

 
LVL 7

Expert Comment

by:HalldorG
ID: 1582439
ftp -n machine then you can do user after you get the connection
0
 

Author Comment

by:dhana
ID: 1582440
If ftp is invoked with -n option, no other command is executed
in the ftp session. For example,

ftp1:root> ftp -n ftp1
Connected to ftp1.india.hp.com.
220 ftp1.india.hp.com FTP server (Version 1.1.214.2 Tue Nov  3 06:02:05 GMT 1998
) ready.
Remote system type is UNIX.
Using binary mode to transfer files.
ftp> pwd
530 Please login with USER and PASS.

In bove example, the only option is, after entering into the ftp seesion, immediately user has to issue the "user" to command to execute any command.

The user has to execute series of command in the ftp session, and then has to issue the "user" command.
0
 
LVL 1

Accepted Solution

by:
dotand earned 20 total points
ID: 1582441
The restriction against sub-login in guest mode is intended. Itherwise I could login to your server as anonymopus and start using the USER command to attempt cracking your system.
Because I'll allrerady be logged and there is no loggin information that is gathered and examined dynamically I'll be set to break your system.

Better that you stick to the old method of letting the users login as usual. If you fear for people grabbing the passwords over the net move to a one time password system or use encrypted connections.

If you will give moire information maybe somebody can tailor a solution to your particular ituation.

HTH,
Dotan
 
0

Featured Post

Supports up to 4K resolution!

The VS192 2-Port 4K DisplayPort Splitter is perfect for anyone who needs to send one source of DisplayPort high definition video to two or four DisplayPort displays. The VS192 can split and also expand DisplayPort audio/video signal on two or four DisplayPort monitors.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This program is used to assist in finding and resolving common problems with wireless connections.
This article explains the fundamentals of industrial networking which ultimately is the backbone network which is providing communications for process devices like robots and other not so interesting stuff.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're looking for how to monitor bandwidth using netflow or packet s…
Suggested Courses
Course of the Month6 days, 21 hours left to enroll

623 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question