Problems with ProFTPD (very newbee)

Discussion in 'Installation/Configuration' started by otger, Nov 26, 2007.

  1. otger

    otger New Member

    Hello!!!
    I used the guide ISP Server Setup with Fedora Core 6, and install ProFTPD.

    I create a new Client: Cliente2
    and a new site: mysite.net
    and a new user: web5_cliente2
    and a new Email Address:: [email protected]

    When I go to https://www.myInstallationSite.net:81/mailuser I log in as:
    user: web5_cliente2 and his password (in this screen I can't read or compose mails, I supose that I must to install squirrelmail or similar...)

    Ok, WebFTP works fine, but when I try to loggin with filezilla I can't loggin:

    Code:
    Estat:	Recuperant l'adreça IP per mysite.net
    Estat:	S'està connectant amb 123.456.789.111:21... (connecting)
    Estat:	Connexió establerta, esperant missatge de benvinguda... (connection stablished, waiting for hello message)
    Resposta:	220 ProFTPD 1.3.0a Server (ProFTPD server) [123.456.789.111]
    Ordre:	USER web1_info
    Resposta:	331 Password required for web5_cliente2.
    Ordre:	PASS ************
    Resposta:	530 Login incorrect.
    Error:	No s'ha pogut connectar al servidor (Can't connect to the server)
    the output of netstat -tap:

    Code:
    Active Internet connections (servers and established)
    Proto Recv-Q Send-Q Local Address               Foreign Address             State       PID/Program name   
    tcp        0      0 *:imaps                     *:*                         LISTEN      2522/dovecot        
    tcp        0      0 *:pop3s                     *:*                         LISTEN      2522/dovecot        
    tcp        0      0 *:mysql                     *:*                         LISTEN      2495/mysqld         
    tcp        0      0 *:pop3                      *:*                         LISTEN      2522/dovecot        
    tcp        0      0 *:imap                      *:*                         LISTEN      2522/dovecot        
    tcp        0      0 *:http                      *:*                         LISTEN      3038/httpd          
    tcp        0      0 *:hosts2-ns                 *:*                         LISTEN      2898/ispconfig_http 
    tcp        0      0 *:ftp                       *:*                         LISTEN      17982/proftpd: (acc 
    tcp        0      0 localhost.localdomai:domain *:*                         LISTEN      3166/named          
    tcp        0      0 *:ssh                       *:*                         LISTEN      2378/sshd           
    tcp        0      0 localhost.localdomain:ipp   *:*                         LISTEN      2362/cupsd          
    tcp        0      0 *:smtp                      *:*                         LISTEN      18047/master        
    tcp        0      0 localhost.localdomain:rndc  *:*                         LISTEN      3166/named          
    tcp        0      0 localhost.lo:x11-ssh-offset *:*                         LISTEN      12735/0             
    tcp        1      0 1234.ISPdomain.net:4342        ftp.crihan.fr:http          CLOSE_WAIT  2735/python         
    tcp        0   2016 1234.ISPdomain.net:ssh         89.131.9.10:56990           ESTABLISHED 12735/0             
    tcp        1      0 1234.ISPdomain.net:naap        gd.tuwien.ac.at:http        CLOSE_WAIT  2735/python         
    tcp        0      0 1234.ISPdomain.net:ssh         89.131.9.10:50338           ESTABLISHED 12536/sshd: root@no 
    tcp        1      0 1234.ISPdomain.net:atmtcp      wiki.fedoraproject.org:http CLOSE_WAIT  2735/python         
    tcp        0      0 1234.ISPdomain.net:ssh         89.131.9.10:50342           ESTABLISHED 12603/sshd: root@no
    cat /var/log/messages|grep proftpd|less
    Code:
    Nov 26 06:37:03 1234 proftpd[5884]: 1234.ISPdomain.net (12.156.1.140[12.156.1.140]) - FTP session opened. 
    Nov 26 06:37:03 1234 proftpd[5884]: 1234.ISPdomain.net (12.156.1.140[12.156.1.140]) - FTP session closed. 
    Nov 26 10:28:44 1234 proftpd[16740]: 1234.ISPdomain.net (65.111.176.125[65.111.176.125]) - FTP session opened. 
    Nov 26 10:28:47 1234 proftpd[16740]: 1234.ISPdomain.net (65.111.176.125[65.111.176.125]) - FTP session closed. 
    Nov 26 20:07:48 1234 proftpd[11649]: 1234.ISPdomain.net (89.131.9.10[89.131.9.10]) - FTP session opened. 
    Nov 26 20:07:48 1234 proftpd[11649]: 1234.ISPdomain.net (89.131.9.10[89.131.9.10]) - no such user 'Cliente2' 
    Nov 26 20:10:29 1234 proftpd[11818]: 1234.ISPdomain.net (89.131.9.10[89.131.9.10]) - FTP session opened. 
    Nov 26 20:10:30 1234 proftpd[11818]: 1234.ISPdomain.net (89.131.9.10[89.131.9.10]) - PAM(web5_cliente2): Authentication fail
    ure. 
    Nov 26 20:11:51 1234 proftpd[11871]: 1234.ISPdomain.net (89.131.9.10[89.131.9.10]) - FTP session opened. 
    Nov 26 20:11:51 1234 proftpd[11871]: 1234.ISPdomain.net (89.131.9.10[89.131.9.10]) - PAM(web1_info): Authentication failure.
     
    Nov 26 20:40:15 1234 proftpd[17982]: localhost.localdomain - ProFTPD killed (signal 15) 
    Nov 26 20:40:15 1234 proftpd[17982]: localhost.localdomain - ProFTPD 1.3.0a standalone mode SHUTDOWN 
    Nov 26 20:40:25 1234 proftpd[13379]: localhost.localdomain - ProFTPD 1.3.0a (stable) (built Tue Feb 6 06:06:54 EST 2007) 
    standalone mode STARTUP
    cat /etc/passwd|less

    Code:
    web4_test:x:10016:10004:Informaci�:/var/www/web4:/bin/false
    web1_test:x:10014:10001::/var/www/web1/user/web1_otger:/bin/false
    web1_info:x:10015:10001:Informaci�:/var/www/web1:/bin/false
    web5_cliente2:x:10018:10005:Info:/var/www/web5:/bin/false
    Thanks to all :)
     
  2. Ben

    Ben Active Member Moderator

    Well if the webftp works fine I'd suggest the account generally is set up fine.
    To proof that you could try to login with a realy basic ftp client, like the "dos" one's or the linux shell ftp, e.g. directly on your machine.

    Do you find anything itneresting in the proftpd's own log.
    Could it be sth. with multiple logins of filezilla? I am not that fimiliar with filezilla but afaik it uses multiple connections by default, e.g. do browse while up/downloading, so there may be a connectionlimit per user?
     
  3. otger

    otger New Member

    Thanks Ben, but I still can't connect :(

    I use the linux shell ftp and this is the output:

    ftp mysite.net
    Connected to mysite.net (123.456.789.012).
    220 ProFTPD 1.3.0a Server (ProFTPD server) [123.456.789.012]
    Name (mysite.net:eek:tger): Cliente2
    331 Password required for web5_cliente2.
    Password:
    530 Login incorrect.
    Login failed.
    Remote system type is UNIX.
    Using binary mode to transfer files.

    In the other hand, the folder /var/log/proftpd
    and the files xferlog , /var/log/xferlog.1.gz and /var/log/xferlog.2.gz are empty :confused:

    Thanks again
     
  4. otger

    otger New Member

    Check button fot the logs

    Now, I've just see a check button for the logs

    This button is in Management / Server / Settings /ftp.

    After check it, and try to connect to the ftp, the folder /var/log/proftpd and the other files still in 0:confused:
     
  5. till

    till Super Moderator Staff Member ISPConfig Developer

    Please post the content of your proftpd.conf file. Is the user web5_cliente2 listed in /etc/password and does e.g. pop3 and smtp work for the user web5_cliente2?
     
  6. otger

    otger New Member

    First thanks Ben & Till,

    This is the proftpd.conf file:
    Code:
    # This is the ProFTPD configuration file
    # $Id: proftpd.conf,v 1.1 2004/02/26 17:54:30 thias Exp $
    
    ServerName			"ProFTPD server"
    ServerIdent			on "FTP Server ready."
    ServerAdmin			root@localhost
    ServerType			standalone
    #ServerType			inetd
    DefaultServer			on
    AccessGrantMsg			"User %u logged in."
    #DisplayConnect			/etc/ftpissue
    #DisplayLogin			/etc/ftpmotd
    #DisplayGoAway			/etc/ftpgoaway
    DeferWelcome			off
    
    # Use this to excude users from the chroot
    DefaultRoot			~ !adm
    
    # Use pam to authenticate (default) and be authoritative
    AuthPAMConfig			proftpd
    AuthOrder			mod_auth_pam.c* mod_auth_unix.c
    
    # Do not perform ident nor DNS lookups (hangs when the port is filtered)
    IdentLookups			off
    UseReverseDNS			off
    
    # Port 21 is the standard FTP port.
    Port				21
    
    # Umask 022 is a good standard umask to prevent new dirs and files
    # from being group and world writable.
    Umask				022
    
    # Default to show dot files in directory listings
    ListOptions			"-a"
    
    # See Configuration.html for these (here are the default values)
    #MultilineRFC2228		off
    #RootLogin			off
    #LoginPasswordPrompt		on
    #MaxLoginAttempts		3
    #MaxClientsPerHost		none
    #AllowForeignAddress		off	# For FXP
    
    # Allow to resume not only the downloads but the uploads too
    AllowRetrieveRestart		on
    AllowStoreRestart		on
    
    # To prevent DoS attacks, set the maximum number of child processes
    # to 30.  If you need to allow more than 30 concurrent connections
    # at once, simply increase this value.  Note that this ONLY works
    # in standalone mode, in inetd mode you should use an inetd server
    # that allows you to limit maximum number of processes per service
    # (such as xinetd)
    MaxInstances			20
    
    # Set the user and group that the server normally runs at.
    User				nobody
    Group				nobody
    
    # Disable sendfile by default since it breaks displaying the download speeds in
    # ftptop and ftpwho
    UseSendfile			no
    
    # This is where we want to put the pid file
    ScoreboardFile			/var/run/proftpd.score
    
    # Normally, we want users to do a few things.
    <Global>
      AllowOverwrite		yes
      <Limit ALL SITE_CHMOD>
        AllowAll
      </Limit>
    </Global>
    
    # Define the log formats
    LogFormat			default	"%h %l %u %t \"%r\" %s %b"
    LogFormat			auth	"%v [%P] %h %t \"%r\" %s"
    
    # TLS
    # Explained at http://www.castaglia.org/proftpd/modules/mod_tls.html
    #TLSEngine			on
    #TLSRequired			on
    #TLSRSACertificateFile		/etc/pki/tls/certs/proftpd.pem
    #TLSRSACertificateKeyFile	/etc/pki/tls/certs/proftpd.pem
    #TLSCipherSuite			ALL:!ADH:!DES
    #TLSOptions			NoCertRequest
    #TLSVerifyClient		off
    ##TLSRenegotiate		ctrl 3600 data 512000 required off timeout 300
    #TLSLog				/var/log/proftpd/tls.log
    
    # SQL authentication Dynamic Shared Object (DSO) loading
    # See README.DSO and howto/DSO.html for more details.
    #<IfModule mod_dso.c>
    #   LoadModule mod_sql.c
    #   LoadModule mod_sql_mysql.c
    #   LoadModule mod_sql_postgres.c
    #</IfModule>
    
    # A basic anonymous configuration, with an upload directory.
    #<Anonymous ~ftp>
    #  User				ftp
    #  Group				ftp
    #  AccessGrantMsg		"Anonymous login ok, restrictions apply."
    #
    #  # We want clients to be able to login with "anonymous" as well as "ftp"
    #  UserAlias			anonymous ftp
    #
    #  # Limit the maximum number of anonymous logins
    #  MaxClients			10 "Sorry, max %m users -- try again later"
    #
    #  # Put the user into /pub right after login
    #  #DefaultChdir			/pub
    #
    #  # We want 'welcome.msg' displayed at login, '.message' displayed in
    #  # each newly chdired directory and tell users to read README* files. 
    #  DisplayLogin			/welcome.msg
    #  DisplayFirstChdir		.message
    #  DisplayReadme			README*
    #
    #  # Some more cosmetic and not vital stuff
    #  DirFakeUser			on ftp
    #  DirFakeGroup			on ftp
    #
    #  # Limit WRITE everywhere in the anonymous chroot
    #  <Limit WRITE SITE_CHMOD>
    #    DenyAll
    #  </Limit>
    #
    #  # An upload directory that allows storing files but not retrieving
    #  # or creating directories.
    #  <Directory uploads/*>
    #    AllowOverwrite		no
    #    <Limit READ>
    #      DenyAll
    #    </Limit>
    #
    #    <Limit STOR>
    #      AllowAll
    #    </Limit>
    #  </Directory>
    #
    #  # Don't write anonymous accesses to the system wtmp file (good idea!)
    #  WtmpLog			off
    #
    #  # Logging for the anonymous transfers
    #  ExtendedLog		/var/log/proftpd/access.log WRITE,READ default
    #  ExtendedLog		/var/log/proftpd/auth.log AUTH auth
    #
    #</Anonymous>
    
    
    DefaultRoot ~
    
    Include /etc/proftpd_ispconfig.conf
    
    And this is the proftpd_ispconfig.conf

    Code:
    ###################################
    #
    # ISPConfig proftpd Configuration File
    #         Version 1.0
    #
    ###################################
    DefaultAddress 127.0.0.1
    <VirtualHost 213.186.45.46>
            DefaultRoot             ~
            AllowOverwrite          on
            Umask                   002
    </VirtualHost>
    
    In the file /etc/password I found
    Code:
    admispconfig:x:101:101:Administrator ISPConfig:/home/admispconfig:/bin/bash
    web5_cliente2:x:10018:10005:Info:/var/www/web5:/bin/false
    
    All the users except admin has the /bin/false :confused:

    Finally, about pop3 and smtp is working for the user web5_cliente2, I'm not sure about how can i check it. I try to configure it on thunderbird but I'm not sure about this is the correct way :(

    Thanks
     
  7. falko

    falko Super Moderator Howtoforge Staff

  8. otger

    otger New Member

    It works!!!

    Hi!!!
    Now works fine!!!:)
    I can send and receive mails and ftp works fine, I'm very happy.

    Thanks Ben, Till and Falko!!!
     
  9. fer0an

    fer0an New Member

    530 login incorrect

    hello
    I want to use ftp client with ispconfig but I recive 530 login incorrect error message.
    I can login to ftp account via ispconfig control panel but I need ftp client.
    when I request for mail https://download.ebookz.ir:81/webmail I recived the error : download.ebookz.ir has sent an incorrect or unexpected message.Error code : -12263.
    I use this command ls -la /root/ispconfig
    and resault is
    drwxr-xr-x 9 root root 4096 2007-12-26 09:28 .
    drwxr-x--- 5 root root 4096 2007-12-24 23:30 ..
    -rwxr-xr-x 1 root root 33004 2007-12-24 14:58 cronolog
    -rwxr-xr-x 1 root root 9673 2007-12-24 14:58 cronosplit
    drwxr-xr-x 12 root root 4096 2007-12-24 14:44 httpd
    drwxr-xr-x 15 root root 4096 2007-12-24 14:58 isp
    -rw-r--r-- 1 root root 8 2007-12-26 09:28 .old_path_httpd_root
    drwxr-xr-x 6 root root 4096 2007-12-24 14:38 openssl
    drwxr-xr-x 6 root root 4096 2007-12-24 14:49 php
    drwxr-xr-x 4 root root 4096 2007-12-24 14:58 scripts
    drwxr-xr-x 4 root root 4096 2007-12-24 14:58 standard_cgis
    drwxr-xr-x 2 root root 4096 2007-12-24 14:58 sv
    -rwx------ 1 root root 9389 2007-12-24 14:58 uninstall

    and this command df -h
    and resualt
    /dev/sda6 996M 323M 622M 35% /
    /dev/sda8 266G 235M 252G 1% /home
    /dev/sda5 996M 34M 911M 4% /tmp
    /dev/sda3 9.7G 1.2G 8.0G 13% /usr
    /dev/sda2 9.7G 257M 9.0G 3% /var
    /dev/sda1 76M 17M 56M 24% /boot
    tmpfs 501M 0 501M 0% /dev/shm

    and etc/passwrd resualt is
    web18_ehsan:x:10017:10018:ehsan:/var/www/web18:/bin/false
    "passwd" [readonly][noeol] 43L, 2071C


    how I can resolve 530 error message from ftp server?
    thank you
     
  10. falko

    falko Super Moderator Howtoforge Staff

    What's the username you used to log in? Is it web18_ehsan?
     

Share This Page