FTP password issues

[Pongyi]

Hi,

I've got FTP installed and running on my internal network on RedHat 6.2. I can log in anonymously and I can log in as root which was what I wanted.

The problem I am having is when a user tries to connect to the FTP server to upload web updates, they get "login incorrect 530, login failed". These same user accounts can telnet the server and get in with the same passwords they are using. They are running win98 machines. I have DNS and apache installed, configured correctly and running on the server. I have ensured that these user accounts are members of the FTP(50) group as well as not listed in /etc/ftpusers.

Any insight that can be provided would be greatly appreciated. Thanx

 

[marsd]

Only thing I can think of is that all users are jailed,
by the anon. env and cannot get outside this env.
This is pretty standard for anon.ftp. The users have no homes in the chroot...

No criticism implied, but logging in as root
is kind of a risk isn't it?

 

[Pongyi]

Thanx for the info. The reson I want root enabled is to demonstrate to the students some of the security risks so they can see what not to do. In a real life situation I would never dream of enabling the root account to ftp.