1

Всем привет!
есть ssh на сервак c Cent OS 5.6, там стоял proftpd. Никак не получалось добавить пользователя для ftp - ftp его не пускал. Когда сменил пароль активному ftp-юзеру, то с новым паролем тоже не получается войти, вернул обратно - тот же результат.

Вот эта тема не помогла - proftpd не хочет работать через service в centos 5.5

Снес proftpd и proftpd.conf, поставил proftpd заново, всеравно не могу зайти по фтп.

Я ни фига не сисадмин и сломал уже всю голову себе, что делать?

Trying 127.0.0.1...
Connected to localhost (127.0.0.1).
220 FTP Server ready.
Name (localhost:root): webbold
331 Password required for webbold
Password:
530 Login incorrect.
Login failed.
Remote system type is UNIX.
Using binary mode to transfer files.
ftp> exit


Вот конфиг дефолтный, только PAM закомментил, но и сним то же самое:

# This is the ProFTPD configuration file
# $Id: proftpd.conf,v 1.1 2004/02/26 17:54:30 thias Exp $

ServerName            "ProFTPD server"
ServerIdent            on "FTP Server ready."
ServerAdmin            root@localhost
ServerType            standalone
#ServerType            inetd
DefaultServer            on
AccessGrantMsg            "User %u logged in."
#DisplayConnect            /etc/ftpissue
#DisplayLogin            /etc/ftpmotd
#DisplayGoAway            /etc/ftpgoaway
DeferWelcome            off

# Use this to excude users from the chroot
DefaultRoot            ~ !adm

# Use pam to authenticate (default) and be authoritative
#AuthPAMConfig            proftpd
#AuthOrder            mod_auth_pam.c* mod_auth_unix.c

# Do not perform ident nor DNS lookups (hangs when the port is filtered)
IdentLookups            off
UseReverseDNS            off

# Port 21 is the standard FTP port.
Port                21

# Umask 022 is a good standard umask to prevent new dirs and files
# from being group and world writable.
Umask                022

# Default to show dot files in directory listings
ListOptions            "-a"

# See Configuration.html for these (here are the default values)
#MultilineRFC2228        off
#RootLogin            off
#LoginPasswordPrompt        on
#MaxLoginAttempts        3
#MaxClientsPerHost        none
#AllowForeignAddress        off    # For FXP

# Allow to resume not only the downloads but the uploads too
AllowRetrieveRestart        on
AllowStoreRestart        on

# To prevent DoS attacks, set the maximum number of child processes
# to 30.  If you need to allow more than 30 concurrent connections
# at once, simply increase this value.  Note that this ONLY works
# in standalone mode, in inetd mode you should use an inetd server
# that allows you to limit maximum number of processes per service
# (such as xinetd)
MaxInstances            20

# Set the user and group that the server normally runs at.
User                nobody
Group                nobody

# Disable sendfile by default since it breaks displaying the download speeds in
# ftptop and ftpwho
UseSendfile            no

# This is where we want to put the pid file
ScoreboardFile            /var/run/proftpd.score

# Normally, we want users to do a few things.
<Global>
  AllowOverwrite        yes
  <Limit ALL SITE_CHMOD>
    AllowAll
  </Limit>
</Global>

# Define the log formats
LogFormat            default    "%h %l %u %t \"%r\" %s %b"
LogFormat            auth    "%v [%P] %h %t \"%r\" %s"

# TLS
#TLSEngine            on
#TLSRequired            on
#TLSRSACertificateFile        /etc/pki/tls/certs/proftpd.pem
#TLSRSACertificateKeyFile    /etc/pki/tls/certs/proftpd.pem
#TLSCipherSuite            ALL:!ADH:!DES
#TLSOptions            NoCertRequest
#TLSVerifyClient        off
##TLSRenegotiate        ctrl 3600 data 512000 required off timeout 300
#TLSLog                /var/log/proftpd/tls.log

# SQL authentication Dynamic Shared Object (DSO) loading
# See README.DSO and howto/DSO.html for more details.
#<IfModule mod_dso.c>
#   LoadModule mod_sql.c
#   LoadModule mod_sql_mysql.c
#   LoadModule mod_sql_postgres.c
#</IfModule>

# A basic anonymous configuration, with an upload directory.
#<Anonymous ~ftp>
#  User                ftp
#  Group                ftp
#  AccessGrantMsg        "Anonymous login ok, restrictions apply."
#
#  # We want clients to be able to login with "anonymous" as well as "ftp"
#  UserAlias            anonymous ftp
#
#  # Limit the maximum number of anonymous logins
#  MaxClients            10 "Sorry, max %m users -- try again later"
#
#  # Put the user into /pub right after login
#  #DefaultChdir            /pub
#
#  # We want 'welcome.msg' displayed at login, '.message' displayed in
#  # each newly chdired directory and tell users to read README* files.
#  DisplayLogin            /welcome.msg
#  DisplayFirstChdir        .message
#  DisplayReadme            README*
#
#  # Some more cosmetic and not vital stuff
#  DirFakeUser            on ftp
#  DirFakeGroup            on ftp
#
#  # Limit WRITE everywhere in the anonymous chroot
#  <Limit WRITE SITE_CHMOD>
#    DenyAll
#  </Limit>
#
#  # An upload directory that allows storing files but not retrieving
#  # or creating directories.
#  <Directory uploads/*>
#    AllowOverwrite        no
#    <Limit READ>
#      DenyAll
#    </Limit>
#
#    <Limit STOR>
#      AllowAll
#    </Limit>
#  </Directory>
#
#  # Don't write anonymous accesses to the system wtmp file (good idea!)
#  WtmpLog            off
#
#  # Logging for the anonymous transfers
#  ExtendedLog        /var/log/proftpd/access.log WRITE,READ default
#  ExtendedLog        /var/log/proftpd/auth.log AUTH auth
#
#</Anonymous>

Вот /etc/pam.d/proftpd:

[root@vm3442 etc]# cat pam.d/proftpd
#%PAM-1.0
auth       required    pam_unix.so
account    required    pam_unix.so
session    required    pam_unix.so

Что ещё ему нужно?

2

вот лог

: dispatching PRE_CMD command 'USER webbold' to mod_tls
: dispatching PRE_CMD command 'USER webbold' to mod_core
: dispatching PRE_CMD command 'USER webbold' to mod_core
: dispatching PRE_CMD command 'USER webbold' to mod_delay
: dispatching PRE_CMD command 'USER webbold' to mod_auth
: dispatching CMD command 'USER webbold' to mod_auth
: dispatching POST_CMD command 'USER webbold' to mod_delay
: dispatching LOG_CMD command 'USER webbold' to mod_log
: dispatching PRE_CMD command 'PASS (hidden)' to mod_tls
: dispatching PRE_CMD command 'PASS (hidden)' to mod_core
: dispatching PRE_CMD command 'PASS (hidden)' to mod_core
: dispatching PRE_CMD command 'PASS (hidden)' to mod_delay
: dispatching PRE_CMD command 'PASS (hidden)' to mod_auth
: dispatching CMD command 'PASS (hidden)' to mod_auth
: retrieved UID 501 for user 'webbold'
: retrieved group ID: 48
: retrieved group name: apache
: ROOT PRIVS at mod_auth_pam.c:311
: RELINQUISH PRIVS at mod_auth_pam.c:481
: ROOT PRIVS at mod_auth_unix.c:571
: RELINQUISH PRIVS at mod_auth_unix.c:651
: USER webbold (Login failed): Incorrect password.
: dispatching POST_CMD_ERR command 'PASS (hidden)' to mod_delay
: dispatching LOG_CMD_ERR command 'PASS (hidden)' to mod_log
: dispatching LOG_CMD_ERR command 'PASS (hidden)' to mod_auth
: FTP session closed.

по ssh с тем же паролем захожу!

3

Пробовал вот такой конфиг:

ServerName                      "default"
ServerType                      standalone
DefaultServer                   on
ScoreboardFile          /var/run/proftpd/proftpd.scoreboard
Port                            21
Umask                           022
MaxInstances                    30
CommandBufferSize       512
User                            nobody
Group                           nobody
AllowOverwrite          on
DefaultRoot ~

то же самое

4

1. Проверь не блокирует ли iptables порт ftp.
2. Покажи вывод команды netstat -nlptu