ftpd/rlogind immediate bailout

GanjaTron · Posted: Sun Apr 10, 2005 12:07 am Post subject: ftpd/rlogind immediate bailout

Hello and help!

Having some big time probs here with ftpd and rlogind under a 2.6.10 kernel
(please don't start with SSH, I'm quite happy with my firewall).

Xinetd calls both daemons, but they immediately bail out before prompting
with SIGCHLD (17). Both services are enabled (disable=no) in /etc/xinetd.d/
and set up to accept requests from my LAN and of course localhost, although
I can't even do a local ftp/rlogin to the latter! I've also (re)generated
the ftpd.pem key.

Why ftp fails is beyond me, since 'ftp -d' produces no debugging output
whatsoever (yes, I checked syslogd.conf). However, 'ftpd -D' (without xinetd
running) works fine!

Any help appreciated!
_________________
END OF LINE. (MCP)

wjholden · l33t Joined: 01 Mar 2004 Posts: 826 Location: Augusta, GA

So you're happy with rlogin...okay, I haven't seen that in more than just a couple years. Oh well.

Are you sure Xinetd is starting? IIRC you have to use an init script to make Xinetd run. In Gentoo you control what starts on boot using the rc-update command.

Or you could tell us the domain name / IP address of the computer and nmap would tell us what services are started and what aren't.

GanjaTron · Posted: Tue Apr 12, 2005 1:33 pm Post subject:

Rest assured xinetd is running -- it clued me in to the fact that ftpd/rlogind croak with signal 17 in the first place.

Port 21 is open, otherwise I get "ftp/tcp: unknown service" instead of the usual "421 Service not available, remote server has closed connection".
_________________
END OF LINE. (MCP)

wjholden · l33t Joined: 01 Mar 2004 Posts: 826 Location: Augusta, GA

Ok I did some searching and found a few things: https://forums.gentoo.org/viewtopic-t-302838-highlight-vsftpd+xinetd.html
https://forums.gentoo.org/viewtopic-t-211696-highlight-vsftpd+xinetd.html

If I were you I'd try reconfiguring VSFTPD to run as a standalone, launched by init scripts, and see if that works better. Saves resources and it's more secure to run a standalone daemon, unlesss you've got PAM integrated into Xinetd (good luck with that).

GanjaTron · Posted: Wed Apr 13, 2005 9:54 am Post subject:

Thanks for the reply, mon. I thought running services on demand via xinetd
is better suited to occasional use (as opposed to a dedicated server). Maybe
there's some compile options for ftpd to start it via xinetd which of course
I can't modify with emerge. I'll give vsftpd a shot.
_________________
END OF LINE. (MCP)

wjholden · l33t Joined: 01 Mar 2004 Posts: 826 Location: Augusta, GA

Wow, I don't know where I got VSFTPD out of your earlier post. I must've assumed it since you can start VSFTPD via Xinetd...sorry I misunderstood; but yeah I highly recommend VSFTPD