ciphermethod.com

# service vsftpd start
vsftpd start/pre-start, process 19503

# ftp localhost
ftp: connect: Connection refused
ftp>

# tail syslog
Apr 3 19:09:13 posix1c kernel: [5432924.750678] init: vsftpd main process (19514) terminated with status 1
Apr 3 19:09:13 posix1c kernel: [5432924.750692] init: vsftpd main process ended, respawning
Apr 3 19:09:13 posix1c kernel: [5432924.753473] init: vsftpd main process (19517) terminated with status 1
Apr 3 19:09:13 posix1c kernel: [5432924.753489] init: vsftpd main process ended, respawning
Apr 3 19:09:13 posix1c kernel: [5432924.756226] init: vsftpd main process (19520) terminated with status 1
Apr 3 19:09:13 posix1c kernel: [5432924.756240] init: vsftpd main process ended, respawning
Apr 3 19:09:13 posix1c kernel: [5432924.758928] init: vsftpd main process (19523) terminated with status 1
Apr 3 19:09:13 posix1c kernel: [5432924.758942] init: vsftpd main process ended, respawning
Apr 3 19:09:13 posix1c kernel: [5432924.761728] init: vsftpd main process (19526) terminated with status 1
Apr 3 19:09:13 posix1c kernel: [5432924.761743] init: vsftpd respawning too fast, stopped

# vsftpd
500 OOPS: unrecognised variable in config file: allow_writeable_chroot

# grep allow_writeable_chroot /etc/vsftpd.conf
allow_writeable_chroot=YES

Comment out:
# grep allow_writeable_chroot /etc/vsftpd.conf
#allow_writeable_chroot=YES

# service vsftpd start
vsftpd start/running, process 19652

Service stays up:
# ftp localhost
Connected to localhost.
220 (vsFTPd 2.3.5)
Name (localhost:user):

# rpm -qa –qf “%{n}.%{arch}\n”
pciutils-devel.x86_64
pkgconfig.x86_64
libusb.x86_64
info.x86_64
desktop-file-utils.x86_64
m4.x86_64
ORBit2.x86_64
perl-Compress-Zlib.x86_64
mkisofs.x86_64
ttmkfdir.x86_64
…

# rpm -qa –qf “%{n}.%{arch}\n” | grep i386 | head
glib2.i386
libSM.i386
audiofile.i386
gmp.i386
pcsc-lite-libs.i386
libXrandr.i386
libXdamage.i386
pcsc-lite-devel.i386
libogg-devel.i386
db4-devel.i386
…

# yum list | grep i386 | head
GConf2.i386 2.14.0-9.el5 installed
NetworkManager.i386 1:0.7.0-13.el5 installed
NetworkManager-glib.i386 1:0.7.0-13.el5 installed
ORBit2.i386 2.14.3-5.el5 installed
OpenIPMI-libs.i386 2.0.16-16.el5 installed
aex-nsclt.i386 6.2-1378 installed
alsa-lib.i386 1.0.17-1.el5 installed
apr.i386 1.2.7-11.el5_6.5 installed
apr-util.i386 1.2.7-11.el5_5.2 installed
aspell.i386 12:0.60.3-13 installed

All web sites have been moved back to the old VM.


1. # passwd <userid>
2. # chsec -f /etc/security/lastlog -a unsuccessful_login_count=0 -s <userid>
3. # chuser account_locked=false <userid>



#!/bin/ksh
# 90 Day/Account Unlocked user check
# 2014 Feb 14 - Jamey Hopkins
# check if account password has not changed in > 90 days and is not locked
# 20140219 JAH - Updated to exclude locked accounts/cleaned up output

echo; echo "Password Change > 90 Days and Account NOT Locked on `uname -n | tr "[a-z]" "[A-Z]"`"
for USER in $(cut -f1 -d":" /etc/passwd | grep -v "+")
do
   LASTCH=`pwdadm -q $USER | awk '/lastupdate/ {FS="="; print $3}'`
   LASTCH_HR=`perl -e "print scalar localtime($LASTCH);"`
   if [[ ! -z $LASTCH ]]; then
      EPOCH=`perl -e 'print time'`
      let PWAGE="$EPOCH - $LASTCH"
      # 7776000 seconds = 90 days
      if [[ $PWAGE -gt 7776000 ]] ; then
         LOCKED=`lsuser -a account_locked $USER | cut -f2 -d= | xargs echo`
         [ "$LOCKED" = "false" ] && echo "$LASTCH_HR: $USER"
      fi
   fi
done
echo