[SOLVED] pure-ftp problem - with mysql connection

Hello,
After upgrade of system (ubuntu 16) and ispconfig (to version 3.1.15p3) , mysql integration with pure-ftpd stopped working.
I can log by local (shell) user account to ftp, I turned on logging of mysql general log, and debug in pure-ftp, I can see that there are correct SELECTs (and if I run them into mysql console - I can see proper values):

Code:

Mar  7 11:08:14 hosting pure-ftpd: ([email protected]) [INFO] New connection from 87.x.x.x
Mar  7 11:08:19 hosting pure-ftpd: ([email protected]) [DEBUG] Command [user] [user]
Mar  7 11:08:22 hosting pure-ftpd: ([email protected]) [DEBUG] Command [pass] [<*>]
                 1105 Query     SELECT password FROM ftp_user WHERE active = 'y' AND server_id = '1' AND username="user" AND (expires IS NULL OR expires="0000-00-00 00:00:00" OR expires > NOW())
                 1105 Query     SELECT uid FROM ftp_user WHERE active = 'y' AND server_id = '1' AND username="user" AND (expires IS NULL OR expires="0000-00-00 00:00:00" OR expires > NOW())
                 1105 Query     SELECT gid FROM ftp_user WHERE active = 'y' AND server_id = '1' AND username="user" AND (expires IS NULL OR expires="0000-00-00 00:00:00" OR expires > NOW())
                 1105 Query     SELECT dir FROM ftp_user WHERE active = 'y' AND server_id = '1' AND username="user" AND (expires IS NULL OR expires="0000-00-00 00:00:00" OR expires > NOW())
Mar  7 11:08:27 hosting pure-ftpd: ([email protected]) [WARNING] Authentication failed for user [user]
Mar  7 11:08:27 hosting pure-ftpd: ([email protected]) [DEBUG] Command [syst] []

(IP and username is changed in above output)
I have 'crypt' setting in /etc/pure-ftpd/db/mysql.conf, I tried to use mkpasswd --method=md5 --stdin and putted output into the database (as I can see - there is now sha512 hash, older accounts are in format:

the freshly created account has following hash:

I even updated pure-ftp to more recent one from: launchpad.net/~corpusops/+archive/ubuntu/pure-ftpd/+index?field.series_filter=xenial, but it didn't help.

Can You give me some advice what can be wrong ? And where search more info ?

 

I forget to write - of course I installed proper versions:

Code:

[root@hosting ~]# dpkg -l | grep pure
ii  pure-ftpd-common                  1.0.49-xenial-44ubuntu36                   all          Pure-FTPd FTP server (Common Files)
ii  pure-ftpd-mysql                   1.0.49-xenial-44ubuntu36                   amd64        Secure and efficient FTP server with MySQL user authentication

 

It looks like some port of system (glibc ?) can't handle sha512 - but even if I used md5 password - it still didn't work.

 

OK, I checked this in another way. Created account for another subdomain (was previously added) in the panel, and ... it worked ok... :/ It looks like the particular domain have blocked ftp access - is it posible ? In ispconfig is opportunity to block some (sub)domains from accessing ftp ?

 

I don't have such user locally (in /etc/passwd):

Code:

[root@hosting /etc]# grep grenton /etc/passwd
[root@hosting /etc]#

here is output from database, can't see the difference (salts are changed to letters 'd'):

Code:

MariaDB [dbispconfig]> select * from ftp_user where ftp_user_id in (12,13);
+-------------+------------+-------------+---------------+----------------+----------------+-----------+------------------+-------------------+-----------------+------------------------------------------------------------------------------------------------------------------------+------------+--------+-------+---------+--------------------------------+-------------+----------+----------+--------------+--------------+---------+-----------+-------------+
| ftp_user_id | sys_userid | sys_groupid | sys_perm_user | sys_perm_group | sys_perm_other | server_id | parent_domain_id | username          | username_prefix | password                                                                                                               | quota_size | active | uid   | gid     | dir                            | quota_files | ul_ratio | dl_ratio | ul_bandwidth | dl_bandwidth | expires | user_type | user_config |
+-------------+------------+-------------+---------------+----------------+----------------+-----------+------------------+-------------------+-----------------+------------------------------------------------------------------------------------------------------------------------+------------+--------+-------+---------+--------------------------------+-------------+----------+----------+--------------+--------------+---------+-----------+-------------+
|          12 |          1 |           2 | riud          | riud           |                |         1 |               32 | grenton_adminftp  | grenton         | $6$rounds=5000$ddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd |         -1 | y      | web32 | client1 | /var/www/clients/client1/web32 |          -1 |       -1 |       -1 |           -1 |           -1 | NULL    | user      | NULL        |
|          13 |          2 |           2 | riud          | riud           |                |         1 |                3 | grenton_testgrftp | grenton         | $6$rounds=5000$ddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd |         -1 | y      | web3  | client1 | /var/www/clients/client1/web3  |          -1 |       -1 |       -1 |           -1 |           -1 | NULL    | user      | NULL        |
+-------------+------------+-------------+---------------+----------------+----------------+-----------+------------------+-------------------+-----------------+------------------------------------------------------------------------------------------------------------------------+------------+--------+-------+---------+--------------------------------+-------------+----------+----------+--------------+--------------+---------+-----------+-------------+
2 rows in set (0.00 sec)

MariaDB [dbispconfig]>

 

OK, I deleted this subdomain and created it from scratch - now it is working OK. I think it was related to problems with upgrade - I need to put two sql upgrade files from command line:

Code:

mysql -h localhost -u ispconfig dbispconfig -p < upd_0087.sql
mysql -h localhost -u ispconfig dbispconfig -p < upd_0088.sql

Now everything works OK - and I have very fresh pure-ftpd

 

It is OK (pasword for mysql root), and I need to figure out what happend during upgrade... I think I lost connection to server (ssh droped connection) during upgrade - I can't see any reason for this partially upgraded ispeconfig now.

Till - thanks for supporting and ideas !

 

Hi Till, I have the same problem.
The new passwords look something like this: $6$rounds=5000$25e7681bf9965fa4$yBRKOt3D2GXqni0SA9lgWhNVKRn1mPnQ
The old accounts continue to work as it should.
I can't do as brk because the domains, where there are problems, are in production.

##### SERVER #####
[INFO] OS version is Ubuntu 18.04.4 LTS
[INFO] ISPConfig is installed.
##### ISPCONFIG #####
ISPConfig version is 3.1dev

 

I can't log in with new accounts though, the password I enter is correct.
I have an error: pure-ftpd: (? @ *****) [WARNING] Authentication failed for user [*******]