vsFTPD login error 530

gag.halfrunt · 11-24-2005, 01:43 PM

hi!

i just installed vsftpd on my ipcop box. i used the precompiled binary from wintermute's website, which means i just have the vsftpd binary and the vsftpd.conf.

so far, so good, vsftpd is up and running, but i am unable to log in. i get the following error message:

Code:

Connected to 192.168.xxx.xxx.
220 Welcome to xyz FTP service.
User (192.168.xxx.xxx:(none)): ftpuser
331 Please specify the password.
Password:
530 Login incorrect.
Login failed.

this is the corresponding entry from my vsftpd.log:

Code:

Thu Nov 24 20:05:37 2005 [pid 3454] CONNECT: Client "192.168.xxx.xxx"
Thu Nov 24 20:05:52 2005 [pid 3453] [ftpuser] FAIL LOGIN: Client "192.168.xxx.xxx"

here's my vsftpd.conf:

Code:

anonymous_enable=NO
local_enable=YES
write_enable=YES
local_umask=077
anon_upload_enable=NO
anon_mkdir_write_enable=NO
dirmessage_enable=NO
xferlog_enable=YES
connect_from_port_20=YES
nopriv_user=vsftpd
chroot_list_enable=NO
chroot_local_user=YES
ls_recurse_enable=YES
listen=YES

userlist_enable=YES
userlist_deny=NO
userlist_file=/etc/vsftpd.user_list

i added two users after install:
* vsftpd without shell and home directory (/dev/null) for the nopriv_user
* ftpuser with home directory /home/ftp (yes, permissions are set)

i normally wouldn't allow a shell login for ftpuser, but to test the password i did, and it works. so it's not really a password problem.
i then added the last three lines above, enabling the userlist, creating the needed file and adding ftpuser. unfortunately this didn't change anything.
my hosts.allow file allows all services to be accessed from my lan, so this isn't an issue either.

if any of you could give me a hint or, better yet, a solution to this problem i'd greatly appreciate it. thanks alot!

bflemin · 12-21-2005, 07:54 PM

I stumbled across this thread while trying to solve a similar problem. I had followed all directions I could find on the web, had set local_enable=YES, etc, but I was unable to login to the FTP server with any of the users I had created. The problem was I had created users with no login shell. I switched them to a login shell of /bin/false and that took care of all the problems. Hope this helps the next newb trying to set up vsftpd.

dsartain · 02-06-2007, 10:11 AM

I'm using vsftpd for an ftp server, it was giving me a pam connection issue, I resolved that, but now the server is giving me a password error

Quote:

[root@localhost etc]# ftp localhost
Connected to the24hourshow.net.
220 (vsFTPd 2.0.5)
530 Please login with USER and PASS.
530 Please login with USER and PASS.
KERBEROS_V4 rejected as an authentication type
Name (localhost:root): username
331 Please specify the password.
Password:
530 Login incorrect.
Login failed.

I know I typed the user/pass in correctly, but my passwd file looks like:

Quote:

dsartain:$1$.VqfdUTV$YkOmOHBWBqtH8piNyVeqo/:500:500:Don Sartain:/home/dsartain:/bin/bash

So I'm thinking that the ftp server isn't encrypting the password before authenticating...or something like that...

my vsftpd.conf file is:

Quote:

# Example config file /etc/vsftpd/vsftpd.conf
#
# The default compiled in settings are fairly paranoid. This sample file
# loosens things up a bit, to make the ftp daemon more usable.
# Please see vsftpd.conf.5 for all compiled in defaults.
#
# READ THIS: This example file is NOT an exhaustive list of vsftpd options.
# Please read the vsftpd.conf.5 manual page to get a full idea of vsftpd's
# capabilities.
#
# Allow anonymous FTP? (Beware - allowed by default if you comment this out).
anonymous_enable=NO
#
# Uncomment this to allow local users to log in.
local_enable=YES
#
# Uncomment this to enable any form of FTP write command.
write_enable=YES
#
# Default umask for local users is 077. You may wish to change this to 022,
# if your users expect that (022 is used by most other ftpd's)
local_umask=022
#
# Uncomment this to allow the anonymous FTP user to upload files. This only
# has an effect if the above global write enable is activated. Also, you will
# obviously need to create a directory writable by the FTP user.
#anon_upload_enable=YES
#
# Uncomment this if you want the anonymous FTP user to be able to create
# new directories.
#anon_mkdir_write_enable=YES
#
# Activate directory messages - messages given to remote users when they
# go into a certain directory.
dirmessage_enable=YES
#
# Activate logging of uploads/downloads.
xferlog_enable=YES
#
# Make sure PORT transfer connections originate from port 20 (ftp-data).
connect_from_port_20=YES
#
# If you want, you can arrange for uploaded anonymous files to be owned by
# a different user. Note! Using "root" for uploaded files is not
# recommended!
#chown_uploads=YES
#chown_username=whoever
#
# You may override where the log file goes if you like. The default is shown
# below.
#xferlog_file=/var/log/vsftpd.log
#
# If you want, you can have your log file in standard ftpd xferlog format
xferlog_std_format=YES
#
# You may change the default value for timing out an idle session.
#idle_session_timeout=600
#
# You may change the default value for timing out a data connection.
#data_connection_timeout=120
#
# It is recommended that you define on your system a unique user which the
# ftp server can use as a totally isolated and unprivileged user.
#nopriv_user=ftpsecure
#
# Enable this and the server will recognise asynchronous ABOR requests. Not
# recommended for security (the code is non-trivial). Not enabling it,
# however, may confuse older FTP clients.
#async_abor_enable=YES
#
# By default the server will pretend to allow ASCII mode but in fact ignore
# the request. Turn on the below options to have the server actually do ASCII
# mangling on files when in ASCII mode.
# Beware that on some FTP servers, ASCII support allows a denial of service
# attack (DoS) via the command "SIZE /big/file" in ASCII mode. vsftpd
# predicted this attack and has always been safe, reporting the size of the
# raw file.
# ASCII mangling is a horrible feature of the protocol.
#ascii_upload_enable=YES
#ascii_download_enable=YES
#
# You may fully customise the login banner string:
#ftpd_banner=Welcome to blah FTP service.
#
# You may specify a file of disallowed anonymous e-mail addresses. Apparently
# useful for combatting certain DoS attacks.
#deny_email_enable=YES
# (default follows)
#banned_email_file=/etc/vsftpd/banned_emails
#
# You may specify an explicit list of local users to chroot() to their home
# directory. If chroot_local_user is YES, then this list becomes a list of
# users to NOT chroot().
#chroot_local_user=YES
chroot_list_enable=YES
# (default follows)
chroot_list_file=/etc/vsftpd/chroot_list
#
# You may activate the "-R" option to the builtin ls. This is disabled by
# default to avoid remote users being able to cause excessive I/O on large
# sites. However, some broken FTP clients such as "ncftp" and "mirror"
assume
# the presence of the "-R" option, so there is a strong case for enabling it.
ls_recurse_enable=YES
#
# When "listen" directive is enabled, vsftpd runs in standalone mode and
# listens on IPv4 sockets. This directive cannot be used in conjunction
# with the listen_ipv6 directive.
#listen=YES
#background=YES
#
# This directive enables listening on IPv6 sockets. To listen on IPv4 and IPv6
# sockets, you must run two copies of vsftpd whith two configuration files.
# Make sure, that one of the listen options is commented !!
#listen_ipv6=YES

#pam_service_name=vsftpd
pam_service_name=vsftpd
userlist_enable=YES
tcp_wrappers=NO
check_shell=NO

landonmkelsey · 05-03-2007, 09:18 PM

[root@localhost vsftpd]# ftp -v localhost
Connected to localhost.localdomain.
220 (vsFTPd 2.0.5)
530 Please login with USER and PASS.
530 Please login with USER and PASS.
KERBEROS_V4 rejected as an authentication type
Name (localhost:root): landon4
331 Please specify the password.
Password:
530 Login incorrect.
Login failed.
ftp>

linuxss · 05-07-2007, 04:10 AM

I am trying to ftp at linux server(fedora core 1) from windows XP computer. I can log in by giving username and password but when i try to get file by giving command wget <filename> or just give dir command i am getting this error:

200 PORT command successful. Consider using PASV.
500 OOPS: vsf_sysutil_bind

Please help.

landonmkelsey · 05-07-2007, 08:07 AM

http://www.linuxforums.org/forum/red...ease-help.html

linux-who? · 03-18-2009, 07:54 PM

hey all,
i had this problem on a RHEL 5.2 box running vsftp 2.6.18-92.el5 with vsftpd-2.0.5-12.el5. i was getting the log-in error for all users except for one user. all of the users that were not working were imported from an AIX platform (copied the /etc/passwd file from the AIX box to the RHEL box). The one user that was not getting the log-in error was created from scratch on the RHEL box. after examineing the /etc/password file, i noticed that the default shell for all of the imported users was /usr/bin/ksh and the default shell for the good user was /bin/ksh. I updated the other users to have this same path and it fixed the problem.....i'm stumped why this was causing the problem because i had no problems for any user logging in with telnet. Also, /usr/bin/ksh is symbolically linked to /bin/ksh. i don't really care because it fixed my problem.....apparently the pam module for vsftp is a little more picky then some of the others. anyway I hope this helps some poor sole out there that is pulling their hair out like i was....
good luck

chrism01 · 03-19-2009, 01:36 AM

See check_shells option here: http://vsftpd.beasts.org/vsftpd_conf.html
On RHEL 5, /bin/ksh is in /etc/shells, /usr/bin/ksh isn't(!)

Badadz · 08-10-2012, 01:52 PM

I also had this error with a new install of Redhat 6.2 and vsftpd. I followed all the guides on setting it up but was testing with FTP connection rather than SFTP - doh

Solution: The FTP method is SFTP and you will get this error when using the simple ftp <ip-address> method from command prompt. I switched to using a GUI based client called FlashFXP to test the connection and set the connection as 'SFTP over SSH' and bingo, it connected and worked. Hope this helps.