<?xml version="1.0" encoding="utf-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
	<channel>
		<title><![CDATA[Linux Forum &mdash; Proftpd на Cent OS 5.6 не пускает юзеров]]></title>
		<link>https://linuxforum.ru/viewtopic.php?id=22268</link>
		<atom:link href="https://linuxforum.ru/extern.php?action=feed&amp;tid=22268&amp;type=rss" rel="self" type="application/rss+xml" />
		<description><![CDATA[Недавние сообщения в теме «Proftpd на Cent OS 5.6 не пускает юзеров».]]></description>
		<lastBuildDate>Fri, 18 May 2012 03:53:30 +0000</lastBuildDate>
		<generator>PunBB</generator>
		<item>
			<title><![CDATA[Re: Proftpd на Cent OS 5.6 не пускает юзеров]]></title>
			<link>https://linuxforum.ru/viewtopic.php?pid=275398#p275398</link>
			<description><![CDATA[<p>1. Проверь не блокирует ли iptables порт ftp.<br />2. Покажи вывод команды netstat -nlptu</p>]]></description>
			<author><![CDATA[null@example.com (semperN)]]></author>
			<pubDate>Fri, 18 May 2012 03:53:30 +0000</pubDate>
			<guid>https://linuxforum.ru/viewtopic.php?pid=275398#p275398</guid>
		</item>
		<item>
			<title><![CDATA[Re: Proftpd на Cent OS 5.6 не пускает юзеров]]></title>
			<link>https://linuxforum.ru/viewtopic.php?pid=275324#p275324</link>
			<description><![CDATA[<p>Пробовал вот такой конфиг:</p><p>ServerName&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &quot;default&quot;<br />ServerType&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; standalone<br />DefaultServer&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;on<br />ScoreboardFile&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; /var/run/proftpd/proftpd.scoreboard<br />Port&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 21<br />Umask&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;022<br />MaxInstances&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 30<br />CommandBufferSize&nbsp; &nbsp; &nbsp; &nbsp;512<br />User&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; nobody<br />Group&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;nobody<br />AllowOverwrite&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; on<br />DefaultRoot ~</p><p>то же самое</p>]]></description>
			<author><![CDATA[null@example.com (cenzored)]]></author>
			<pubDate>Thu, 17 May 2012 17:25:48 +0000</pubDate>
			<guid>https://linuxforum.ru/viewtopic.php?pid=275324#p275324</guid>
		</item>
		<item>
			<title><![CDATA[Re: Proftpd на Cent OS 5.6 не пускает юзеров]]></title>
			<link>https://linuxforum.ru/viewtopic.php?pid=275323#p275323</link>
			<description><![CDATA[<p><strong>вот лог</strong></p><p> : dispatching PRE_CMD command &#039;USER webbold&#039; to mod_tls<br /> : dispatching PRE_CMD command &#039;USER webbold&#039; to mod_core<br /> : dispatching PRE_CMD command &#039;USER webbold&#039; to mod_core<br /> : dispatching PRE_CMD command &#039;USER webbold&#039; to mod_delay<br /> : dispatching PRE_CMD command &#039;USER webbold&#039; to mod_auth<br /> : dispatching CMD command &#039;USER webbold&#039; to mod_auth<br /> : dispatching POST_CMD command &#039;USER webbold&#039; to mod_delay<br /> : dispatching LOG_CMD command &#039;USER webbold&#039; to mod_log<br /> : dispatching PRE_CMD command &#039;PASS (hidden)&#039; to mod_tls<br /> : dispatching PRE_CMD command &#039;PASS (hidden)&#039; to mod_core<br /> : dispatching PRE_CMD command &#039;PASS (hidden)&#039; to mod_core<br /> : dispatching PRE_CMD command &#039;PASS (hidden)&#039; to mod_delay<br /> : dispatching PRE_CMD command &#039;PASS (hidden)&#039; to mod_auth<br /> : dispatching CMD command &#039;PASS (hidden)&#039; to mod_auth<br /> : retrieved UID 501 for user &#039;webbold&#039;<br /> : retrieved group ID: 48<br /> : retrieved group name: apache<br /> : ROOT PRIVS at mod_auth_pam.c:311<br /> : RELINQUISH PRIVS at mod_auth_pam.c:481<br /> : ROOT PRIVS at mod_auth_unix.c:571<br /> : RELINQUISH PRIVS at mod_auth_unix.c:651<br /> : USER webbold (Login failed): Incorrect password.<br /> : dispatching POST_CMD_ERR command &#039;PASS (hidden)&#039; to mod_delay<br /> : dispatching LOG_CMD_ERR command &#039;PASS (hidden)&#039; to mod_log<br /> : dispatching LOG_CMD_ERR command &#039;PASS (hidden)&#039; to mod_auth<br /> : FTP session closed.</p><p>по ssh с тем же паролем захожу!</p>]]></description>
			<author><![CDATA[null@example.com (cenzored)]]></author>
			<pubDate>Thu, 17 May 2012 17:24:59 +0000</pubDate>
			<guid>https://linuxforum.ru/viewtopic.php?pid=275323#p275323</guid>
		</item>
		<item>
			<title><![CDATA[Proftpd на Cent OS 5.6 не пускает юзеров]]></title>
			<link>https://linuxforum.ru/viewtopic.php?pid=275313#p275313</link>
			<description><![CDATA[<p>Всем привет!<br />есть ssh на сервак c Cent OS 5.6, там стоял proftpd. Никак не получалось добавить пользователя для ftp - ftp его не пускал. Когда сменил пароль активному ftp-юзеру, то с новым паролем тоже не получается войти, вернул обратно - тот же результат.</p><p>Вот эта тема не помогла - <a href="http://linuxforum.ru/viewtopic.php?id=6286.">proftpd не хочет работать через service в centos 5.5</a></p><p>Снес proftpd и proftpd.conf, поставил proftpd заново, всеравно не могу зайти по фтп.</p><p>Я ни фига не сисадмин и сломал уже всю голову себе, что делать?</p><p>Trying 127.0.0.1...<br />Connected to localhost (127.0.0.1).<br />220 FTP Server ready.<br />Name (localhost:root): webbold<br />331 Password required for webbold<br />Password:<br />530 Login incorrect.<br />Login failed.<br />Remote system type is UNIX.<br />Using binary mode to transfer files.<br />ftp&gt; exit</p><br /><p><strong>Вот конфиг дефолтный, только PAM закомментил, но и сним то же самое:</strong></p><p># This is the ProFTPD configuration file<br /># $Id: proftpd.conf,v 1.1 2004/02/26 17:54:30 thias Exp $</p><p>ServerName&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &quot;ProFTPD server&quot;<br />ServerIdent&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; on &quot;FTP Server ready.&quot;<br />ServerAdmin&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; root@localhost<br />ServerType&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; standalone<br />#ServerType&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; inetd<br />DefaultServer&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; on<br />AccessGrantMsg&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &quot;User %u logged in.&quot;<br />#DisplayConnect&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; /etc/ftpissue<br />#DisplayLogin&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; /etc/ftpmotd<br />#DisplayGoAway&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; /etc/ftpgoaway<br />DeferWelcome&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; off</p><p># Use this to excude users from the chroot<br />DefaultRoot&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; ~ !adm</p><p># Use pam to authenticate (default) and be authoritative<br />#AuthPAMConfig&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; proftpd<br />#AuthOrder&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; mod_auth_pam.c* mod_auth_unix.c</p><p># Do not perform ident nor DNS lookups (hangs when the port is filtered)<br />IdentLookups&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; off<br />UseReverseDNS&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; off</p><p># Port 21 is the standard FTP port.<br />Port&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 21</p><p># Umask 022 is a good standard umask to prevent new dirs and files<br /># from being group and world writable.<br />Umask&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 022</p><p># Default to show dot files in directory listings<br />ListOptions&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &quot;-a&quot;</p><p># See Configuration.html for these (here are the default values)<br />#MultilineRFC2228&nbsp; &nbsp; &nbsp; &nbsp; off<br />#RootLogin&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; off<br />#LoginPasswordPrompt&nbsp; &nbsp; &nbsp; &nbsp; on<br />#MaxLoginAttempts&nbsp; &nbsp; &nbsp; &nbsp; 3<br />#MaxClientsPerHost&nbsp; &nbsp; &nbsp; &nbsp; none<br />#AllowForeignAddress&nbsp; &nbsp; &nbsp; &nbsp; off&nbsp; &nbsp; # For FXP</p><p># Allow to resume not only the downloads but the uploads too<br />AllowRetrieveRestart&nbsp; &nbsp; &nbsp; &nbsp; on<br />AllowStoreRestart&nbsp; &nbsp; &nbsp; &nbsp; on</p><p># To prevent DoS attacks, set the maximum number of child processes<br /># to 30.&nbsp; If you need to allow more than 30 concurrent connections<br /># at once, simply increase this value.&nbsp; Note that this ONLY works<br /># in standalone mode, in inetd mode you should use an inetd server<br /># that allows you to limit maximum number of processes per service<br /># (such as xinetd)<br />MaxInstances&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 20</p><p># Set the user and group that the server normally runs at.<br />User&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; nobody<br />Group&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; nobody</p><p># Disable sendfile by default since it breaks displaying the download speeds in<br /># ftptop and ftpwho<br />UseSendfile&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; no</p><p># This is where we want to put the pid file<br />ScoreboardFile&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; /var/run/proftpd.score</p><p># Normally, we want users to do a few things.<br />&lt;Global&gt;<br />&nbsp; AllowOverwrite&nbsp; &nbsp; &nbsp; &nbsp; yes<br />&nbsp; &lt;Limit ALL SITE_CHMOD&gt;<br />&nbsp; &nbsp; AllowAll<br />&nbsp; &lt;/Limit&gt;<br />&lt;/Global&gt;</p><p># Define the log formats<br />LogFormat&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; default&nbsp; &nbsp; &quot;%h %l %u %t \&quot;%r\&quot; %s %b&quot;<br />LogFormat&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; auth&nbsp; &nbsp; &quot;%v [%P] %h %t \&quot;%r\&quot; %s&quot;</p><p># TLS<br />#TLSEngine&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; on<br />#TLSRequired&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; on<br />#TLSRSACertificateFile&nbsp; &nbsp; &nbsp; &nbsp; /etc/pki/tls/certs/proftpd.pem<br />#TLSRSACertificateKeyFile&nbsp; &nbsp; /etc/pki/tls/certs/proftpd.pem<br />#TLSCipherSuite&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; ALL:!ADH:!DES<br />#TLSOptions&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; NoCertRequest<br />#TLSVerifyClient&nbsp; &nbsp; &nbsp; &nbsp; off<br />##TLSRenegotiate&nbsp; &nbsp; &nbsp; &nbsp; ctrl 3600 data 512000 required off timeout 300<br />#TLSLog&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; /var/log/proftpd/tls.log</p><p># SQL authentication Dynamic Shared Object (DSO) loading<br /># See README.DSO and howto/DSO.html for more details.<br />#&lt;IfModule mod_dso.c&gt;<br />#&nbsp; &nbsp;LoadModule mod_sql.c<br />#&nbsp; &nbsp;LoadModule mod_sql_mysql.c<br />#&nbsp; &nbsp;LoadModule mod_sql_postgres.c<br />#&lt;/IfModule&gt;</p><p># A basic anonymous configuration, with an upload directory.<br />#&lt;Anonymous ~ftp&gt;<br />#&nbsp; User&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; ftp<br />#&nbsp; Group&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; ftp<br />#&nbsp; AccessGrantMsg&nbsp; &nbsp; &nbsp; &nbsp; &quot;Anonymous login ok, restrictions apply.&quot;<br />#<br />#&nbsp; # We want clients to be able to login with &quot;anonymous&quot; as well as &quot;ftp&quot;<br />#&nbsp; UserAlias&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; anonymous ftp<br />#<br />#&nbsp; # Limit the maximum number of anonymous logins<br />#&nbsp; MaxClients&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 10 &quot;Sorry, max %m users -- try again later&quot;<br />#<br />#&nbsp; # Put the user into /pub right after login<br />#&nbsp; #DefaultChdir&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; /pub<br />#<br />#&nbsp; # We want &#039;welcome.msg&#039; displayed at login, &#039;.message&#039; displayed in<br />#&nbsp; # each newly chdired directory and tell users to read README* files. <br />#&nbsp; DisplayLogin&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; /welcome.msg<br />#&nbsp; DisplayFirstChdir&nbsp; &nbsp; &nbsp; &nbsp; .message<br />#&nbsp; DisplayReadme&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; README*<br />#<br />#&nbsp; # Some more cosmetic and not vital stuff<br />#&nbsp; DirFakeUser&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; on ftp<br />#&nbsp; DirFakeGroup&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; on ftp<br />#<br />#&nbsp; # Limit WRITE everywhere in the anonymous chroot<br />#&nbsp; &lt;Limit WRITE SITE_CHMOD&gt;<br />#&nbsp; &nbsp; DenyAll<br />#&nbsp; &lt;/Limit&gt;<br />#<br />#&nbsp; # An upload directory that allows storing files but not retrieving<br />#&nbsp; # or creating directories.<br />#&nbsp; &lt;Directory uploads/*&gt;<br />#&nbsp; &nbsp; AllowOverwrite&nbsp; &nbsp; &nbsp; &nbsp; no<br />#&nbsp; &nbsp; &lt;Limit READ&gt;<br />#&nbsp; &nbsp; &nbsp; DenyAll<br />#&nbsp; &nbsp; &lt;/Limit&gt;<br />#<br />#&nbsp; &nbsp; &lt;Limit STOR&gt;<br />#&nbsp; &nbsp; &nbsp; AllowAll<br />#&nbsp; &nbsp; &lt;/Limit&gt;<br />#&nbsp; &lt;/Directory&gt;<br />#<br />#&nbsp; # Don&#039;t write anonymous accesses to the system wtmp file (good idea!)<br />#&nbsp; WtmpLog&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; off<br />#<br />#&nbsp; # Logging for the anonymous transfers<br />#&nbsp; ExtendedLog&nbsp; &nbsp; &nbsp; &nbsp; /var/log/proftpd/access.log WRITE,READ default<br />#&nbsp; ExtendedLog&nbsp; &nbsp; &nbsp; &nbsp; /var/log/proftpd/auth.log AUTH auth<br />#<br />#&lt;/Anonymous&gt;</p><p><strong>Вот /etc/pam.d/proftpd:</strong></p><p>[root@vm3442 etc]# cat pam.d/proftpd<br />#%PAM-1.0<br />auth&nbsp; &nbsp; &nbsp; &nbsp;required&nbsp; &nbsp; pam_unix.so<br />account&nbsp; &nbsp; required&nbsp; &nbsp; pam_unix.so<br />session&nbsp; &nbsp; required&nbsp; &nbsp; pam_unix.so</p><p><strong>Что ещё ему нужно?</strong></p>]]></description>
			<author><![CDATA[null@example.com (cenzored)]]></author>
			<pubDate>Thu, 17 May 2012 16:47:24 +0000</pubDate>
			<guid>https://linuxforum.ru/viewtopic.php?pid=275313#p275313</guid>
		</item>
	</channel>
</rss>
