MPE admins,

Please forgive me for double-posting.  I initially
posted directly to comp.sys.hp.mpe and got no response, so
I'm trying an email to the listserver.

I hope you can help me with a problem I'm having with a system
I've inherited admin responsibility for.  The machine is a series
957 running MPE/ix v5.0 with Security/3000.  It was configured
such that when you FTP'd to it there was no prompt for password.
So anyone knowing the nodename or IP address and a valid username
could gain access and insert/replace/delete files at will.  I've
disabled incoming FTP sessions for now.

I read in a HP3000 FAQ (www.3k.com) that I should modify line
37 of JFTPSTRT.ARPA.SYS to be
RUN FTPMON.ARPA.SYS;info="password"
and give the FTP.SYS account SF capability in order to fix this
problem.

But when I did so (and rebooted) I could no longer FTP into the
system.  Rather than prompting for the password, the session goes
something like

1. I initiate the ftp session from my client workstation
ftp> open <hostname>    ; hostname omitted for obvious reasons

2. Our system prompts for username and I enter it
username (default-username): xxx.yyy

3. The login fails with no prompt for password, with the message
530 User log on unsuccessful: user and/or account must have a password.
Login failed

I have searched some through our HP ARPA services docs and the
Security/3000 manual and haven't found anything helpful.  I'd
greatly appreciate any advice. Thanks in advance.

Tom