I configured vsftpd on a Ubuntu 13.10 with anonymous_enable=NO and local_enable=YES, and use my ssh credential to login. The problem is illustrated in this screenshot:
As you can see my username is shown as default name. I think this is a security problem (I know, I do have a strong password for this username, and adding another layer of obscurity doesn't hurt.) Is there anyway to disable default username prompt? Thanks.
1 Answer
The ftp server is not assuming your username. It's the client that it's sending your actual username as credentials. If I try to log in into your box, I get this (I've blurred your public IP for your own security):
So I don't think it's a security issue, it only happens because you're not specifying a username, and the system thinks you want to use the same you're already using in the client. Other people login from the outside would have the same error I did.
If you want to increase security, use sftp (ftp over ssh) which will add encryption to the whole client/server communication.
3
