LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Newbie (https://www.linuxquestions.org/questions/linux-newbie-8/)
-   -   ProFTPD -- Login faild from remote but works form local (https://www.linuxquestions.org/questions/linux-newbie-8/proftpd-login-faild-from-remote-but-works-form-local-761583/)

barkermn01 10-13-2009 07:26 AM

ProFTPD -- Login faild from remote but works form local
 
Hello all,

I have read a fair few post before creating one,

But im a trying to setup proftpd to work on my centOS box,

Now i have created the users and it can login from the box but when i try from my PC it just fails at login incorrect

Sorry for the amount of text

Here is my Config
Code:

DefaultRoot ~
# This is the ProFTPD configuration file
# $Id: proftpd.conf,v 1.1 2004/02/26 17:54:30 thias Exp $

ServerName                      "ProFTPD server"
ServerIdent                    on "FTP Server ready."
ServerAdmin                    root@localhost
ServerType                      standalone
#ServerType                    inetd
DefaultServer                  on
AccessGrantMsg                  "User %u logged in."
#DisplayConnect                /etc/ftpissue
#DisplayLogin                  /etc/ftpmotd
#DisplayGoAway                  /etc/ftpgoaway
DeferWelcome                    off

# Use this to excude users from the chroot
DefaultRoot                    ~ !adm

# Use pam to authenticate (default) and be authoritative
AuthPAMConfig                  proftpd
AuthOrder                      mod_auth_pam.c* mod_auth_unix.c

# Do not perform ident nor DNS lookups (hangs when the port is filtered)
IdentLookups                    off
UseReverseDNS                  off

# Port 21 is the standard FTP port.
Port                            21

# Umask 022 is a good standard umask to prevent new dirs and files
# from being group and world writable.
Umask                          022

# Default to show dot files in directory listings
ListOptions                    "-a"

# See Configuration.html for these (here are the default values)
#MultilineRFC2228              off
#RootLogin                      off
#LoginPasswordPrompt            on
#MaxLoginAttempts              3
#MaxClientsPerHost              none
#AllowForeignAddress            off    # For FXP

# Allow to resume not only the downloads but the uploads too
AllowRetrieveRestart            on
AllowStoreRestart              on

# To prevent DoS attacks, set the maximum number of child processes
# to 30.  If you need to allow more than 30 concurrent connections
# at once, simply increase this value.  Note that this ONLY works
# in standalone mode, in inetd mode you should use an inetd server
# that allows you to limit maximum number of processes per service
# (such as xinetd)
MaxInstances                    20

# Set the user and group that the server normally runs at.
User                            nobody
Group                          nobody

# Disable sendfile by default since it breaks displaying the download speeds in
# ftptop and ftpwho
UseSendfile                    no

# This is where we want to put the pid file
ScoreboardFile                  /var/run/proftpd.score

# Normally, we want users to do a few things.
<Global>
  AllowOverwrite                yes
  <Limit ALL SITE_CHMOD>
    AllowAll
  </Limit>
</Global>

# Define the log formats
LogFormat                      default "%h %l %u %t \"%r\" %s %b"
LogFormat                      auth    "%v [%P] %h %t \"%r\" %s"

# TLS
# Explained at http://www.castaglia.org/proftpd/modules/mod_tls.html
#TLSEngine                      on
#TLSRequired                    on
#TLSRSACertificateFile          /etc/pki/tls/certs/proftpd.pem
#TLSRSACertificateKeyFile      /etc/pki/tls/certs/proftpd.pem
#TLSCipherSuite                ALL:!ADH:!DES
#TLSOptions                    NoCertRequest
#TLSVerifyClient                off
##TLSRenegotiate                ctrl 3600 data 512000 required off timeout 300
#TLSLog                        /var/log/proftpd/tls.log

# SQL authentication Dynamic Shared Object (DSO) loading
# See README.DSO and howto/DSO.html for more details.
#<IfModule mod_dso.c>
#  LoadModule mod_sql.c
#  LoadModule mod_sql_mysql.c
#  LoadModule mod_sql_postgres.c
#</IfModule>

# A basic anonymous configuration, with an upload directory.
#<Anonymous ~ftp>
#  User                        ftp
#  Group                                ftp
#  AccessGrantMsg              "Anonymous login ok, restrictions apply."
#
#  # We want clients to be able to login with "anonymous" as well as "ftp"
#  UserAlias                    anonymous ftp
#
#  # Limit the maximum number of anonymous logins
#  MaxClients                  10 "Sorry, max %m users -- try again later"
#
#  # Put the user into /pub right after login
#  #DefaultChdir                        /pub
#
#  # We want 'welcome.msg' displayed at login, '.message' displayed in
#  # each newly chdired directory and tell users to read README* files.
#  DisplayLogin                /welcome.msg
#  DisplayFirstChdir            .message
#  DisplayReadme                        README*
#
#  # Some more cosmetic and not vital stuff
#  DirFakeUser                  on ftp
#  DirFakeGroup                on ftp
#
#  # Limit WRITE everywhere in the anonymous chroot
#  <Limit WRITE SITE_CHMOD>
#    DenyAll
#  </Limit>
#
#  # An upload directory that allows storing files but not retrieving
#  # or creating directories.
#  <Directory uploads/*>
#    AllowOverwrite            no
#    <Limit READ>
#      DenyAll
#    </Limit>
#
#    <Limit STOR>
#      AllowAll
#    </Limit>
#  </Directory>
#
#  # Don't write anonymous accesses to the system wtmp file (good idea!)
#  WtmpLog                      off
#
#  # Logging for the anonymous transfers
#  ExtendedLog          /var/log/proftpd/access.log WRITE,READ default
#  ExtendedLog          /var/log/proftpd/auth.log AUTH auth
#
#</Anonymous>

This is the code form a localhost login
Code:

Connected to vps1.barkersmedia.co.uk.
220 FTP Server ready.
500 AUTH not understood
500 AUTH not understood
KERBEROS_V4 rejected as an authentication type
Name (localhost:root): welford
331 Password required for welford
Password:
230 User welford logged in.
Remote system type is UNIX.
Using binary mode to transfer files.
ftp> quit
221 Goodbye.
[root@vps1 home]# nano /etc/proftpd.conf
[root@vps1 home]#
[root@vps1 home]# nano /etc/proftpd.conf
[root@vps1 home]# ftp localhost
Connected to vps1.barkersmedia.co.uk.
220 FTP Server ready.
500 AUTH not understood
500 AUTH not understood
KERBEROS_V4 rejected as an authentication type
Name (localhost:root): welford
331 Password required for welford
Password:
230 User welford logged in.
Remote system type is UNIX.
Using binary mode to transfer files.

But this is from FilZilla on my windows machien
Code:

Status:        Resolving address of vps1.barkersmedia.co.uk
Status:        Connecting to 69.197.137.237:21...
Status:        Connection established, waiting for welcome message...
Response:        220 FTP Server ready.
Command:        USER welfod
Response:        331 Password required for welfod
Command:        PASS **********
Response:        530 Login incorrect.
Error:        Critical error
Error:        Could not connect to server


eth1 10-17-2009 03:07 AM

From the information you've provided, you're using Fully Qualified Domain Name as the FTP server name/hostname. Can you use the FTP server IP address just to make sure it isn't a DNS resolution issue ? I do see vps1.barkersmedia.co.uk being used and it is resolving to 69.197.137.237 which seems correct.

It could also be PAM,can you comment the following directives in the configuration file and restart the Pro-ftpd service ?

Quote:

# Use pam to authenticate (default) and be authoritative
AuthPAMConfig proftpd
AuthOrder mod_auth_pam.c* mod_auth_unix.c

barkermn01 10-19-2009 03:29 AM

Quote:

Originally Posted by eth1 (Post 3722516)
From the information you've provided, you're using Fully Qualified Domain Name as the FTP server name/hostname. Can you use the FTP server IP address just to make sure it isn't a DNS resolution issue ? I do see vps1.barkersmedia.co.uk being used and it is resolving to 69.197.*.* which seems correct.

It could also be PAM,can you comment the following directives in the configuration file and restart the Pro-ftpd service ?

ok thanks for that it seemed to start working its self about 3 hours after this post,

But please can you remove My IP from your post there are bots scanning for ip's on the internet


All times are GMT -5. The time now is 04:13 AM.