some ftpd problems

[Mitchell Marks <mitchell cs uchicago edu>]

First, I apologize if redhat-install-list is supposed to be just about installation questions.  From the description, I took it to be open for all sorts of issues, for those new to Red Hat or with new RH installations.

RH is 7.2
ftpd is  wu-2.6.1-18, as shipped


The FTP is working generally but giving me a few problems.

1.  When contacted via commandline from another Unix host, ftp-ing in as real user, when I do an "ls" it does return a listing but then hangs.  (I've turned on verbose command logging, and) the log shows a "LIST" command, but nothing about trouble after that.

2.  It does not seem to allow passive connections, i.e. PASV, from GUI programs where this is a checkbox option.  I'm going to have some users from behind firewalls who will need to use this.  I've tried various things with "pasv-allow" in /etc/ftpaccess, but they don't seem relevant.

(Could these be connected?)

Any diagnostic or correction suggestions?

Thanks,

Mitch Marks

P.S. 
Here is the /etc/xinetd.d/wu-ftpd:


# default: on
# description: The wu-ftpd FTP server serves FTP connections. It uses \
#       normal, unencrypted usernames and passwords for authentication.
service ftp
{
        disable = no
        socket_type             = stream
        wait                    = no
        user                    = root
        server                  = /usr/sbin/in.ftpd
        server_args             = -l -a
        log_on_success          += DURATION USERID
        log_on_failure          += USERID
        nice                    = 10
}



And here is /etc/ftpaccess:


# This file controls the behavior of the wu-ftpd
# ftp server.
#
# If you're looking for a graphical frontend to
# editing it, try kwuftpd from the kdeadmin
# package.

# Don't allow system accounts to log in over ftp
deny-uid %-99 %65534-
deny-gid %-99 %65534-
# allow-uid ftp
# allow-gid ftp
guestserver

# The ftpchroot group doesn't exist by default, this
# entry is just supplied as an example.
# To chroot a user, modify the line below or create
# the ftpchroot group and add the user to it.
#
# You will need to setup the required applications
# and libraries in the root directory (set using
# guest-root).
#
# Look at the anonftp package for the files you'll need.
guestgroup ftpchroot

# User classes...
class   all   real,guest,anonymous  *
#class   all   real  *

pasv-allow real *

# Set this to your email address
email root localhost

# Allow 5 mistyped passwords
loginfails 5

# Notify the users of README files at login and when
# changing to a different directory
readme  README*    login
readme  README*    cwd=*

# Messages displayed to the user
message /welcome.msg            login
message .message                cwd=*

# Allow on-the-fly compression and tarring
compress        yes             all
tar             yes             all

# Prevent anonymous users (and partially guest users)
# from executing dangerous commands
chmod           no              guest,anonymous
delete          no              anonymous
overwrite       no              anonymous
rename          no              anonymous

# Turn on logging to /var/log/xferlog
log transfers anonymous,guest,real inbound,outbound
log commands

# If /etc/shutmsg exists, don't allow logins
# see ftpshut man page
shutdown /etc/shutmsg

# Ask users to use their email address as anonymous
# password
passwd-check rfc822 warn


# Allow keepalive
keepalive yes

# Timeout listing

--
Mitchell Marks
CUIP Tech Coordinator    http://cuip.uchicago.edu
CUIP: Chicago Public Schools / Univ. of Chicago Internet Project
5640 S Ellis Ave  AAC-045, Univ of Chgo, Chgo IL 60637

Telephone:  Ofc 773-702-6041  
        Fax 702-8212  
        Home (v.m. only, ok any time) 241-7166
Email: Primary address: mitch cuip uchicago edu
        Alternate UofC addresses (use especially to report problems with cuip.uchicago.edu): mitchell cs uchicago edu and mmar midway uchicago edu
        Off-campus (ISP) address: mmarks corecomm net

The street was flooded, but luckily we found a Ford and were able to get across.