ProFtpd

bullium · 01-10-2005, 10:36 AM

I installed Slackware 10.0 last week, and now want to to use the FTP. I successfully started ProFTPd but every time I try to log in with a local user ("NOT root" I have anonymous and root disabled) but a normal user it tells me "Login failed." The username and password I am suppling are correct. I'm not sure what the problem is? Any help would be appreciated.

tw001_tw · 01-10-2005, 10:50 AM

Taking into account your /etc/proftpd.conf file is allowing in the IP you are trying
to login from.. and that the user you are trying to use is setup on that computer
and that you can log in locally with that user:

Here is an excerpt of my /etc/ftpusers file:

Quote:

# To enable anonymous FTP, remove the "ftp" user:
ftp
root
# tom
# End of ftpusers

So only 'tom' can log in.

Or did I miss something?
-tw

(just trying to get the ball rolling

)

bullium · 01-10-2005, 11:03 AM

[QUOTE]Originally posted by tw001_tw
[B]Taking into account your /etc/proftpd.conf file is allowing in the IP you are trying
to login from.. and that the user you are trying to use is setup on that computer
and that you can log in locally with that user:

Here is an excerpt of my /etc/ftpusers file:

So only 'tom' can log in.

Or did I miss something?

I'm not sure if you did LOL?

your commenting out tom with #tom so I don't even think ProFTPd would even read tom I could be wrong. Anyway I can log into the system locally and via SSH with the same user I'm trying to logon with FTP. I went ahead and added # username to my /etc/ftpusers file with no luck

.

Thanks

tw001_tw · 01-10-2005, 11:07 AM

In the /etc/ftpusers file - what is UNCOMMENTED is prevented from loggin in.

Quote:

#
# ftpusers This file describes the names of the users that may
# _*NOT*_ log into the system via the FTP server.
# This usually includes "root", "uucp", "news" and the
# like, because those users have too much power to be
# allowed to do "just" FTP...

Taken from the top of the default /etc/ftpusers file.

-tw

edited:
(kinda contrary to conventional thinking)

bullium · 01-10-2005, 11:12 AM

Quote:

Originally posted by tw001_tw
In the /etc/ftpusers file - what is UNCOMMENTED is prevented from loggin in.

Taken from the top of the default /etc/ftpusers file.

-tw

You just verified what I said. the # says don't look at anything after me on this line

example:

Code:

#This is a commented line
#The program won't read this, and if it did it would think that "The program" was a username when it really isn't.

tw001_tw · 01-10-2005, 11:22 AM

Exactly.

Quote:

bullium said:
"# says don't look at anything after me on this line"

right.

Quote:

default /etc/ftpusers says
"# ftpusers This file describes the names of the users that may
# _*NOT*_ log into the system via the FTP server."

So you need your user commented out (or not mentioned ?) in /etc/ftpusers.

Quote:

bullium said:
I went ahead and added # username to my /etc/ftpusers file with no luck

So thats not it, but leave the comment ( # ) there - otherwise you'll never get in.

So, can you ftp into using ftp or root just to test? OR is nothing working.

-tw

(p.s. - I think I get where the confusion came in. I at one time had user tom prevented from
logging via ftp. - SORRY.)

bullium · 01-10-2005, 11:56 AM

Quote:

Originally posted by tw001_tw
Exactly.

right.

So you need your user commented out (or not mentioned ?) in /etc/ftpusers.

So thats not it, but leave the comment ( # ) there - otherwise you'll never get in.

So, can you ftp into using ftp or root just to test? OR is nothing working.

-tw

(p.s. - I think I get where the confusion came in. I at one time had user tom prevented from
logging via ftp. - SORRY.)

Yeah I think that is were the confusion came from. Anyway since root and ftp are in my ftpusers file I cannot login as them. I went ahead and commented root out so that I may be able to login as root. After commenting it out I was still not able to logon as root. So now I changed it back to default uncommented. Still no logon as original non root user?

tw001_tw · 01-10-2005, 12:20 PM

Have to go to work real soon, but here are some things off the top of my head.

I am guessing we can rule out anything wrong with the /etc/ftpusers file, and since you
get an error about proftpd not letting you log in, I'm guessing its up and running.

Double & triple check your /etc/proftpd.conf file.

Here are some highlights from my working proftpd.conf file:

Code:

# Global stuff
ServerName			"ProFTPD is used for this ftp"
# ServerType			standalone
ServerType			inetd
DefaultServer			on
Port				21
Umask				022
TimeoutIdle                    1200 
MaxInstances			1
SystemLog			/var/log/proftpd.log
TransferLog			/var/log/xferlog
MaxClients			1
DisplayLogin			welcome.msg
DisplayFirstChdir		.message

Code:

<Limit LOGIN>
order Allow,Deny
Allow from 192.168.1.100
Deny from all
</Limit>

Since my ftp is not public, I simply used the IP of my main computer as the only thing
allowed in. This won't work too well (at all) if your trying to access it from a different site.
The rest of the file just has to do with write permissions, etc.

Good luck!
-tw

bullium · 01-12-2005, 09:46 AM

I finally found the problem! It was simple but I don't think anyone would have thought of it. The problem was in the /etc/passwd file. At the end of the user after the last : you specify the shell that the user will use, /bin/sh was specified? As soon as I changed it to /bin/bash my users could start login in right away! So for anyone else that had the Incorrect Login statement when they logged in check this file.

Thanks for everyone's help.

0.o · 01-12-2005, 10:11 AM

Code:

RequireValidShell off

That will allow you to put the users shell as /bin/false (or whatever). This is a good practice if you want that user to only have ftp access.

Just a tip here, but you shouldn't post the same problem to two different sections of the forum.

tw001_tw · 01-12-2005, 10:30 AM

Quote:

bullium said:
I finally found the problem!

Thats something to keep in mind. good job!
-tw

bullium · 01-12-2005, 10:37 AM

Quote:

Originally posted by 0.o

Code:

RequireValidShell off

That will allow you to put the users shell as /bin/false (or whatever). This is a good practice if you want that user to only have ftp access.

Just a tip here, but you shouldn't post the same problem to two different sections of the forum.

Do you ad

Code:

RequireValidShell off

to the proftpd.conf file?
Also I only added the post to another section because only myself and tw001_tw were participating in this section, making no headway.