WEB and FTP on seperate servers

Discussion in 'Installation/Configuration' started by BlackChart, Jan 7, 2012.

  1. BlackChart

    BlackChart New Member

    I've installed ISPConfig 3 in a multiserver environment.
    All files for web-servers are located at a dedicated storage array controlled by OpenFiler...

    Layout as follows:
    storage.mydomain.com - Storage (OpenFiler)
    mail.mydomain.com - mail, mysql, ftp (Main ISPConfig server)
    web01.mydomain.com - Web server (Slave ISPConfig server)
    web02.mydomain.com - Web server (mirror of web01)
    vps.mydomain.com - OpenVZ server

    Problem is (i think!) that FTP and web-servers are NOT physically the same server.

    I can't login to FTP, logs only gives this (with debugging enabled):

    Code:
    Jan  7 18:41:02 mail pure-ftpd: ([email protected]) [INFO] New connection from 192.168.1.2
    Jan  7 18:41:02 mail pure-ftpd: ([email protected]) [DEBUG] Command [user] [blackchart1]
    Jan  7 18:41:02 mail pure-ftpd: ([email protected]) [DEBUG] Command [pass] [<*>]
    Jan  7 18:41:02 mail pure-ftpd: ([email protected]) [INFO] PAM_RHOST enabled. Getting the peer address
    Jan  7 18:41:08 mail pure-ftpd: ([email protected]) [WARNING] Authentication failed for user [blackchart1]
    Jan  7 18:41:08 mail pure-ftpd: ([email protected]) [INFO] Logout.
    Any idea of how to get this working?
    The idea of seperated web and FTP server was not to have FTP taking rescources from web-servers...
     
  2. till

    till Super Moderator Staff Member ISPConfig Developer

    Web and FTP have to be on the same server, as the FTP directories are the web directories. It does not make sense to separate them, as you wont be able to upload any files into your website if FTP is on a different system.
     
  3. BlackChart

    BlackChart New Member

    SAN is the secret word here ;)

    The ONLY server with more than 40 gigs of own space is the MySQL/Mail server which was intended to run FTP as well...

    I've attached an image showing the current layout..
     

    Attached Files:

    • Net.jpg
      Net.jpg
      File size:
      29.3 KB
      Views:
      84
  4. till

    till Super Moderator Staff Member ISPConfig Developer

    The FTP server(s) have to be on the web server(s), not the mail server in a ISPConfig setup.
     
  5. BlackChart

    BlackChart New Member

    Okay..

    As I understand I only have to install the FTP server on one of the web-servers?!
    Apache2 is a mirror of Apache1 and would eventually be load-balanced with a pfSense firewall..

    Maybe pfSense even can load-balance FTP connections?! Have to investigate further :D
     
  6. till

    till Super Moderator Staff Member ISPConfig Developer

    Yes, that should work.
     
  7. BlackChart

    BlackChart New Member

    Hmmm...

    Moved FTP-server to Apache1.
    Now I can login but directory list are empty and I can't create new files / dirs...

    Still debug log gives nothing to work with (PureFTPd seems pretty sparse in logging, even with debug enabled).

    From FileZilla:
    Code:
    Command:	MLSD
    Response:	150 Accepted data connection
    Response:	226-Sorry, we were unable to read [.]
    Response:	226-Options: -a -l 
    Response:	226 0 matches total
    PureFTPd Debug log:
    Code:
    [DEBUG] Command [opts] [UTF8 ON]
    [DEBUG] Command [pwd] []
    [DEBUG] Command [type] [I]
    [DEBUG] Command [pasv] []
    [DEBUG] Command [mlsd] []
     
  8. till

    till Super Moderator Staff Member ISPConfig Developer

    Which ISPConfig version do you use? If you use 3.0.4.1 then I recommend to update to the current 3.0.4.2 RC1 as there is a file permission buf that might cause this:

    http://www.howtoforge.com/forums/showthread.php?t=55647

    Then create a new website and try if this site works. If not, post the output of

    ls -la /var/www/domain.tld/
     
  9. BlackChart

    BlackChart New Member

    Still no luck :(

    Code:
    root@web01:/mnt# ls -la /var/www/t3nettet.dk/
    totalt 28
    drwxr-x--x+ 6 web13 client3 82  9 jan 13:16 .
    drwxr-s---+ 3 root      501 36  9 jan 13:16 ..
    drwxr-x--x+ 2 web13 client3  6  9 jan 13:16 cgi-bin
    -rwxr-xr-x+ 1 root  root    40  9 jan 13:16 .htpasswd_stats
    lrwxrwxrwx  1 root      501 36  9 jan 13:16 log -> /var/log/ispconfig/httpd/t3nettet.dk
    drwxr-x--x+ 2 web13 client3  6  9 jan 13:16 ssl
    drwxrwxrwx+ 2 web13 client3  6  9 jan 13:16 tmp
    drwx--x---+ 4 web13 client3 98  9 jan 13:16 web
     
  10. till

    till Super Moderator Staff Member ISPConfig Developer

    The folder permissions are fine. Just a guess, do you have a firewall activated? If yes, try to deactivate it and/or try to force your FTP client to use a active mode connection. Most FTP Clients switch to passive mode after the initial login and when your firewall blocks the passive port range of the FTP server, then you get a "blank" result.

    If shutting down the firewall fixes the problem, then define a pssive port range in pure-ftpd and then open these ports in the firewall:

    http://www.faqforge.com/linux/contr...ange-in-pure-ftpd-on-denian-and-ubuntu-linux/
     
  11. BlackChart

    BlackChart New Member

    Currently testing on internal network only and all machines was freshly installed when ISPConfig was installed and no iptables setup as to my knowledge...
    All (execpt Windows of course and storage which is OpenFiler) are running latest kernel for Debian Squeeze...
     
  12. BlackChart

    BlackChart New Member

    And same error in active mode..
     
  13. BlackChart

    BlackChart New Member

    Did a quick test with files on local machine and it worked...

    For some reason PureFTPd doesn't work when directories are stored on NFS volumes :(
     
  14. till

    till Super Moderator Staff Member ISPConfig Developer

    As far as I know, pure-ftpd should work on a nfs server. Maybe you can try some different mount options?
     
  15. BlackChart

    BlackChart New Member

    Allready on it, will let you know if I find a workable solution..
     

Share This Page