VSFTPD error

Norami · 12-10-2009, 12:16 AM

I'm trying to get FTP set up, but I'm not having much luck.

First off, When I try to connect as a local user (even with local users enabled in the vsftpd.conf file) it tells me the server is anonymous only.

So I decided "let's just log in as anonymous"

Well, it connected the first time I did it, but then I couldn't upload anything. So i modified the conf file to allow anonymous users to upload files, and make directories.

Now I'm getting this error, and can't get it to go away. I can't even connect!

"500 OOPS: vsftpd: refusing to run with writable anonymous root"

I would like to be able to log in as root and upload the files to my specific directories, instead of having to upload to a temporary directory, and then moving all the files after they're uploaded. I'm assuming there's something wonky going on with the conf file, but I've read it up and down, and can't figure it out. Anyone with experience out there? I need to get a site up and running, and I can't do it if I can't ftp the files. If you have another suggestion for getting the files to my cloud server, that'd be awesome as well.

Disillusionist · 12-10-2009, 01:37 AM

By default ftp does not allow you to log in as root, and certainly not anonymously!

Please post your vsftpd.conf file

should look something like:

Code:

# grep -v '^#' vsftpd.conf
anonymous_enable=YES
local_enable=YES
write_enable=YES
local_umask=022
dirmessage_enable=YES
xferlog_enable=YES
connect_from_port_20=YES
xferlog_std_format=YES

pam_service_name=vsftpd
userlist_enable=YES
listen=YES
tcp_wrappers=YES

Also check you /etc/vsftpd.user_list and /etc/vsftpd.ftpusers files

Norami · 12-10-2009, 01:53 AM

Code:

# nano /etc/vsftpd.conf
listen=YES
anonymous_enable=YES
local_enable=YES
write_enable=YES
anon_upload_enable=YES
anon_mkdir_write_enable=YES
dirmessage_enable=YES
xferlog_enable=YES
connect_from_port_20=YES
secure_chroot_dir=/var/run/vsftpd
pam_service_name=vsftpd
rsa_cert_file=/etc/ssl/certs/ssl-cert-snakeoil.pem
rsa_private_key_file=/etc/ssl/private/ssl-cert-snakeoil.key

There's a few comments in between there, but I didn't figure you needed those.

I don't have a file named vsftpd.user_list

The ftpusers file contains a list that starts with root. Is this file denying a connection from root through FTP?

Disillusionist · 12-10-2009, 02:01 AM

Yes, if you remove root from the list you will be able to log in as root.

I would however, suggest that you remove the:

Quote:

anon_upload_enable=YES
anon_mkdir_write_enable=YES

entries from the /etc/vsftpd/vsftpd.conf file and then restart the daemon.

Norami · 12-10-2009, 02:05 AM

Awesome, that did it!

I didn't realize there was a list blocking root access.

Thanks for the help!