Explizit Authentication Problem 530 with pure-ftpd and FTP-Connection

Discussion in 'ISPConfig 3 Priority Support' started by schmidtedv, Apr 14, 2020.

  1. schmidtedv

    schmidtedv Member HowtoForge Supporter

    I put on a new Virtual-Server from HostEurope with the Ubuntu 18.04 HowTo and 2 other Add-Ons:
    1. https://www.howtoforge.com/tutorial...l-pureftpd-bind-postfix-doveot-and-ispconfig/
    2. https://www.howtoforge.com/tutorial/securing-ispconfig-3-with-a-free-lets-encrypt-ssl-certificate/
    3. https://www.goover.de/article/7-installieren-mehrerer-php-versionen-mit-ispconfig3-und-ubuntu-18-04/
    and except for 1-2 smaller issues (pureftpd.conf existed), everything is running fine. The only problem I have, is when I try to connect to the server over FileZilla, it will not connect anymore. It worked, but now, after putting on another FTP-User for another Web (and maybe after some other system-updates - not shure, when this problem started), it will not connect anymore. I already tried with and without certificate, renewed the certificate, configured pure-ftpd without TLS, but nothing seems to help:

    Code:
    Apr 14 11:25:59 mail pure-ftpd-mysql[3810]: Starting ftp server: Running: /usr/sbin/pure-ftpd-mysql-virtualchroot -l mysql:/etc/pure-ftpd/db/mysql.conf -l pam -O clf:/var/log/pure-ftpd/transfer.log
    Already configured/tried (connect to mysql-db via console -> works):

    Code:
    PassivePortRange -> 40110 40210
    DontResolve -> yes
    
    ForcePassiveIP -> doesn't work
    IPV4Only -> doesn't work
    TLS -> with or without, doesn't matter
    
    MySQLServer: 127.0.0.1 (syslog) ->
    
    Apr 14 11:26:01 mail pure-ftpd: ([email protected]) [INFO] New connection from 127.0.0.1
    Apr 14 11:26:01 mail pure-ftpd: ([email protected]) [DEBUG] Command [quit] []
    Apr 14 11:26:01 mail pure-ftpd: ([email protected]) [INFO] Logout.
    
    MySQLServer: localhost (syslog) ->
    
    Apr 14 11:27:29 mail pure-ftpd: ([email protected]) [INFO] New connection from 83.135.112.xxx
    Apr 14 11:27:29 mail pure-ftpd: ([email protected]) [DEBUG] Command [auth] [TLS]
    Apr 14 11:27:29 mail pure-ftpd: ([email protected]) [INFO] TLS: Enabled TLSv1.3 with TLS_AES_256_GCM_SHA384, 256 secret bits cipher
    Apr 14 11:27:29 mail pure-ftpd: ([email protected]) [DEBUG] Command [user] [xxx_web2_cms]
    Apr 14 11:27:29 mail pure-ftpd: ([email protected]) [DEBUG] Command [pass] [<*>]
    Apr 14 11:27:35 mail pure-ftpd: ([email protected]) [WARNING] Authentication failed for user [xxx_web2_cms]
    Apr 14 11:27:35 mail pure-ftpd: ([email protected]) [INFO] Logout.
    
    auth.log:
    
    Apr 14 11:42:53 mail pure-ftpd: pam_unix(pure-ftpd:auth): check pass; user unknown
    Apr 14 11:42:53 mail pure-ftpd: pam_unix(pure-ftpd:auth): authentication failure; logname= uid=0 euid=0 tty=pure-ftpd ruser=xxx_web2_cms rhost=
    Any idea, what else I could check or could be responsible for this behavior?
     
  2. till

    till Super Moderator Staff Member ISPConfig Developer

    The most likely reason is FileZilla here. FileZilla's recent version introduced some incompatibilities with older pure-ftpd versions, such as the one from Ubuntu 18.04. Try using a different FTP client to see if this is the reason for your issue.
     
  3. schmidtedv

    schmidtedv Member HowtoForge Supporter

    Hi Till,
    would have been nice, but even with cyberduck I'm getting the same message. I also have another Server, running Ubuntu 16.04, that works with FileZilla without any problems.
     
  4. schmidtedv

    schmidtedv Member HowtoForge Supporter

    More or less, my setup went through these standard steps:
    Code:
    1. apt-get update, apt-get upgrade, apt-get dist-upgrade
    2. apt-get install update-inetd
    3. Für VPS-Server:
       ln -s /aquota.group /quota.group
       ln -s /aquota.user /quota.user
    4. dpkg-reconfigure locales
       dpkg-reconfigure tzdata
    5. apt-get install localepurge
       localepurge
    6. apt-get install ssh openssh-server
    7. dpkg-reconfigure dash (-> Use dash as default system shell: Nein)
    8. Für VPS-Server (HostEurope):
       Hostnamen anpassen nach Anleitung
    9. https://www.howtoforge.com/tutorial/perfect-server-ubuntu-18.04-with-apache-php-myqsl-pureftpd-bind-postfix-doveot-and-ispconfig/
    
    -> phpmyadmin weglassen (manuell einrichten)
    -> apt-get install aspell-de
    -> Für Pure-FTPd (vor "openssl req -x509 ..."):
       openssl dhparam -out /etc/ssl/private/pure-ftpd-dhparams.pem 2048
    
    -> Für VPS-Server:
       Anpassung der /fstab überspringen
    
    -> neue Version 2.21 von jailkit verwenden
    -> roudcube weglassen (manuell einrichten)
    
    10. https://www.howtoforge.com/tutorial/securing-ispconfig-3-with-a-free-lets-encrypt-ssl-certificate/
    
    -> openssl dhparam -out /etc/ssl/private/pure-ftpd-dhparams.pem 2048
    -> service pure-ftpd-mysql restart
    
    -> apt-get install nano
    -> update-alternatives --config editor (nano auswählen)
    -> incrontab -e
    -> /etc/letsencrypt/archive/mail.xxxxx.de/ IN_MODIFY ./etc/init.d/le_ispc_pem.sh
    -> STRG + O / STRG + X
    
    11. https://www.faqforge.com/linux/controlpanels/ispconfig3/how-to-set-the-passiveportrange-in-pure-ftpd-on-denian-and-ubuntu-linux/
    12. https://www.howtoforge.com/tutorial/ubuntu-roundcube-latest/
    13. https://www.howtoforge.com/perfect-server-debian-10-buster-apache-bind-dovecot-ispconfig-3-1/#-install-phpmyadmin-database-administration-tool
    14. https://www.goover.de/article/7-installieren-mehrerer-php-versionen-mit-ispconfig3-und-ubuntu-18-04/
        nachträglich kontrollieren (Ubuntu 18.04 nutzt PHP 7.2):
        update-alternatives --config php
        update-alternatives --config php-cgi
    15. Nur Abhängigkeiten installieren (php, ffmpeg, etc.):
        https://www.allerstorfer.at/install-nextcloud-15-on-ubuntu-18-04-with-ispconfig-31/
    16. vhost.conf.master anpassen (sonst funktionieren die typo3-links nicht)
        Kopie in /conf-custom erstellen und "Options +SymlinksIfOwnerMatch" in
        "Options +FollowSymLinks" ändern
    17. apt-get install graphicsmagick
    These steps are already working on my dedicated Hetzner Server for Ubuntu 16.04 and have been partly corrected for the VPS-Setup. In my opinion, everything should be ok, but...I'm a bit helpless now. Any chance, maybe to order some help from you or Florian to check the setup?
     
  5. till

    till Super Moderator Staff Member ISPConfig Developer

    Do you have a shell user with this name [xxx_web2_cms on the system which might conflict with the virtual FTP user?

    You can reach Florian here: https://www.ispconfig.org/get-support/?type=ispconfig
     
  6. schmidtedv

    schmidtedv Member HowtoForge Supporter

    No shell user.

    I don't know, maybe I will cancel the VPS-Server again. I'm not that satisfied with HostEurope and their virtual Servers anymore...so maybe it's not worth it to put too much time in this rather than getting a real dedicated server again. Thanks for your help, I will keep the business support in mind, when I need it :)
     
  7. till

    till Super Moderator Staff Member ISPConfig Developer

    Personally, I use cloud servers and dedicated servers from Hetzner for many years now and I'm still happy with that decision, especially their new cloud system (which basically provides VPS servers) is really nice. I've worked with Hosteurope VPS as well in the past, won't use them again :)
     

Share This Page