I'm trying to set up vsftpd so only system accounts can login (no anonymous logins). Right now it's running, and it will ask for a password, but no matter what user I try to login as it will say the password is wrong, even if it's a fresh account that I just made the password for. Any idea what's going on here?

The only items I changed from the default vsftpd.conf are:
anonymous_enable=NO
local_enable=YES
write_enable=YES

I thought that's all I had to do, but it's rejecting valid passwords still.



Assuming I get this running, does anyone know how hard it is to link up vsftpd to a mysql database for the login process? I'd also like to link in pop3 accounts to mysql (I can't seem to login to pop3 either), but I'll save that question for another post once I get this one working.

Hi,

Never really used this program, but I think the cause of your problem is the lack of PAM support on your system...
you may wish to try adding the following line to your config file:

check_shell=NO

As for your second question, I don't think it would be possible without actually changing the code for the program. It looks for local system users. If you are allowing ftp access say to members of a web page, you may wish to create a group for vsftusers (albeit highly restrictive access) and add some sort of adduser script to your web page using perl.

ok, I set check_shell=NO and restarted xinetd, but it's still the same.

As for the mysql part I suppose it would be best to just run adduser from php. Redhat won't freak out if I have 3,000 user accounts, right?

I got this from the faq about pam..

vsftpd tries to link with PAM. (Run "ldd vsftpd" and look for libpam to
find out whether this has happened or not). If vsftpd links with PAM, then you will need to have a PAM file installed for the vsftpd service. There is a sample one for RedHat systems included in the "RedHat" directory - put it under /etc/pam.d

can't really think/find anything else... sorry

Are you using pam? What's in your /etc/pam.d/vsftpd?
Do you have the following in your /etc/vsftpd.conf?

pam_service_name=vsftpd

The above name must match the name of the file in /etc/pam.d/vsftpd

-e

awesome! it works!


many thanks.