root 用户不能ftp

Question

11.31 的系统，今天发现突然root 用户不能ftp了， 没有设置/etc/ftpd/ftpusers 文件及也无、etc/shells文件
root有密码，远程telnet无问题，为何ftp不行， 服务已经确认启用没有问题，不知为何如此

Answer 1

报错是什么？

Answer 2

本帖最后由 whd 于 2011-04-18 12:02 编辑

C:\>ftp 10.11.1.7
Connected to 10.11.1.7.
220 sescdb01 FTP server (Revision 4.0 Version wuftpd-2.6.1 Wed Jun 18 07:11:14 G
MT 200 ready.
User (10.11.1.7none)): root
331 Password required for root.
Password:
530 Login incorrect.
Login failed.
ftp>

Answer 3

syslog呢

Answer 4

/etc/inetd.conf中，ftp是否被禁掉？
/etc/services中，ftp 端口是否打开？
/etc/passwd中，root的shell是不是/sbin/sh？

Answer 5

查看配置目录下，看ROOT是不是禁用了
我装的vsftpd就需要在root前加了#

Answer 6

本帖最后由 whd 于 2011-05-18 09:49 编辑

问题仍然没有解决，syslog记录如下

May 18 09:19:05 sescdb01  above message repeats 8 times
May 18 09:19:05 sescdb01 ftpd[10796]: pam_authenticate:Authentication failed
May 18 09:19:05 sescdb01 ftpd[10796]: User root: Login incorrect
May 18 09:19:05 sescdb01 ftpd[10796]: failed login from 10.11.1.20 [10.11.1.20]
May 18 09:19:10 sescdb01 ftpd[10796]: FTP session closed
May 18 09:19:11 sescdb01 ftpd[10836]: Data port : 20
May 18 09:19:11 sescdb01 ftpd[10836]: FTP server (Revision 4.0 Version wuftpd-2.6.1 Wed Jun 18 07:11:14 GMT 200 ready.
May 18 09:19:28 sescdb01 ftpd[10836]: pam_authenticate:Authentication failed
May 18 09:19:28 sescdb01 ftpd[10836]: User root: Login incorrect
May 18 09:19:28 sescdb01 ftpd[10836]: failed login from 10.11.1.20 [10.11.1.20]
May 18 09:19:33 sescdb01 ftpd[10836]: lost connection to 109.119.33.20 [10.11.1.20]
May 18 09:19:33 sescdb01 ftpd[10836]: FTP session closed

/etc/services     端口已经开启
/etc/inetd         也无问题
/var/adm/inetd.sec   文件内容如下

db01:[/var/adm] cat inetd.sec
# @(#)B.11.31_LRinetd.sec $Revision: 1.10.214.1 $ $Date: 96/10/08 13:20:06 $
#
#
# The lines in the file contain a service name, permission field and
# the Internet addresses or names of the hosts and/or networks
# allowed to use that service in the local machine.
# The form for each entry in this file is:
#
# <service name>   <allow/deny>  <host/network addresses, host/network names>
#
# For example:
#
# login         allow   10.3-5 192.34.56.5 ahost anetwork
#
# The above entry allows the following hosts to attempt to access your system
# using rlogin:
#               hosts in subnets 3 through 5 in network 10,
#               the host with Internet Address of 192.34.56.5,
#               the host by the name of "ahost",
#               all the hosts in the network "anetwork"
#
# mountd      deny    192.23.4.3
#
# The mountd entry  denies host  192.23.4.3  access to the NFS  rpc.mountd
# server.
#
# Hosts and network names must be official names, not aliases.
# See the inetd.sec(4) manual page for more information.
dtspc   allow   127.0.0.1       sescdb01

默认的应该，不知道是否正确

Answer 7

/etc/passwd中，root的shell是不是/sbin/sh？

Answer 8

root:*:0:3::/:/sbin/sh

这个没有问题

Answer 9

trust系统？
root密码修改过？是什么？