Linode Forum
Linode Community Forums
 FAQFAQ    SearchSearch    MembersMembers      Register Register 
 LoginLogin [ Anonymous ] 
Post new topic  Reply to topic
Author Message
PostPosted: Thu Oct 02, 2008 7:15 pm 
Offline
Newbie

Joined: Mon Sep 29, 2008 5:41 pm
Posts: 4
Hey guys, I got a VPS now and I'm trying to set it all up. I still have to get my e-mail and FTP working.

Specs:
CentOS 5.2
Latest ProFTPd

I'm trying to setup ProFTPd so that I can login using my regular user accounts. Whenever I attempt to login I get a "Login failed" response. I did some searching and it seems like this can be from a variety of different causes and to look in the logs to see what the actual cause is. From reading the logs it says that my password is wrong.

I have stripped my config file down to a very basic one for debug purposes. Here it is:

Quote:
DefaultRoot ~
ServerName "Mike's FTP Server"
ServerIdent on "FTP Server ready."
ServerType standalone
DefaultServer on
Port 21
Umask 022
MaxInstances 2
User nobody
Group nobody


Any ideas why it's not allowing me to use the standard user accounts? I've tried a couple different user accounts and they all give the same results.


Top
   
 Post subject:
PostPosted: Fri Oct 03, 2008 3:05 am 
Offline
Senior Member

Joined: Fri Sep 12, 2008 3:17 am
Posts: 166
Website: http://independentchaos.com
Don't really have much time to be posting, quick google search found this:
http://www.castaglia.org/proftpd/doc/co ... ation.html


Top
   
 Post subject:
PostPosted: Fri Oct 03, 2008 12:06 pm 
Offline
Newbie

Joined: Mon Sep 29, 2008 5:41 pm
Posts: 4
freedom_is_chaos wrote:
Don't really have much time to be posting, quick google search found this:
http://www.castaglia.org/proftpd/doc/co ... ation.html


I don't think I want any of those though. I want to just use the regular users from /etc/passwd.


Top
   
 Post subject:
PostPosted: Fri Oct 03, 2008 12:16 pm 
Offline
Junior Member

Joined: Tue Sep 25, 2007 3:04 pm
Posts: 27
An option in my proftpd config that deal with authentication:

RequireValidShell off

Set this so you can make FTP users that do not have shell access to the machine.

Alternatively you can add /sbin/nologin to /etc/shells.


Top
   
 Post subject:
PostPosted: Fri Oct 03, 2008 2:07 pm 
Offline
Newbie

Joined: Mon Sep 29, 2008 5:41 pm
Posts: 4
But I want to use users which have shell access.


Top
   
 Post subject:
PostPosted: Fri Oct 03, 2008 2:35 pm 
Offline
Junior Member

Joined: Tue Sep 25, 2007 3:04 pm
Posts: 27
Try also adding:

IdentLookups off

What else is there in your proftpd config? How is your authentication setup? Are you using PAM or something "in-house"?


Top
   
 Post subject:
PostPosted: Fri Oct 03, 2008 2:55 pm 
Offline
Senior Member
User avatar

Joined: Mon Dec 10, 2007 4:30 pm
Posts: 341
Website: http://markwalling.org
I think this is a new record for a thread about ftp to not be answered with "zmog ftp is evil, use ssh", but...

zmog ftp is evil, use ssh.

Seriously, OpenSSH's supplied config file has directives in it to enable SCP access, it already talks to PAM/passwd, and its secure. Unless you have a need for ftp, I'd look into using SCP instead.


Top
   
 Post subject:
PostPosted: Fri Oct 03, 2008 4:33 pm 
Offline
Senior Member
User avatar

Joined: Sun Feb 08, 2004 7:18 pm
Posts: 562
Location: Austin
Agree with mwalling, for what it's worth. SSH does everything FTP can do, and better.


Top
   
 Post subject:
PostPosted: Fri Oct 03, 2008 6:58 pm 
Offline
Senior Member

Joined: Thu Oct 02, 2008 8:56 am
Posts: 99
Yes and no.
There are some really nice upload management tools that just work better with ftp.
You can however often use ssl to secure the authentication. I've never done it though, I just use scp or rsync over ssh.


Top
   
 Post subject:
PostPosted: Fri Oct 03, 2008 9:58 pm 
Offline
Senior Member
User avatar

Joined: Mon Dec 10, 2007 4:30 pm
Posts: 341
Website: http://markwalling.org
GUIs are overrated. WinSCP does a fine job from Windows, the big DEs have it built in somehow for Linux, and Mac users....

! people still use macs?!?!

My day job is a GUI designer... maybe thats why all my forms have Vim like accessibility shortcuts


Top
   
 Post subject:
PostPosted: Fri Oct 03, 2008 11:53 pm 
Offline
Junior Member

Joined: Tue Sep 25, 2007 3:04 pm
Posts: 27
FTP is good in situations when you do not want users to have shell access. On top of that, you can allow anonymous connections for file transfers and things of that nature.

There are many benefits to using FTP over SCP, it really depends on what you're trying to accomplish.

In my situation, I like to do some hosting for people. I don't advise them to go download WinSCP and learn how to use "keyfiles" to authenticate to the server. FTP provides them an easy and highly supported way to authenticate, and I provide explicit SSL to boot if they so wish to choose it.


Top
   
 Post subject:
PostPosted: Sat Oct 04, 2008 1:06 am 
Offline
Newbie

Joined: Mon Sep 29, 2008 5:41 pm
Posts: 4
I tried logging in using SFTP/SSH and it said that I had the wrong password as well. I used the same login and password as I use to SSH in normally. How do I go about configuring SFTP now?


Top
   
 Post subject:
PostPosted: Sat Oct 04, 2008 3:55 am 
Offline
Senior Member
User avatar

Joined: Sun Feb 08, 2004 7:18 pm
Posts: 562
Location: Austin
A-KO wrote:
FTP is good in situations when you do not want users to have shell access. On top of that, you can allow anonymous connections for file transfers and things of that nature.


Check out scponly. I use it in this situation.


Top
   
 Post subject:
PostPosted: Sat Oct 04, 2008 10:53 am 
Offline
Senior Member
User avatar

Joined: Mon Dec 10, 2007 4:30 pm
Posts: 341
Website: http://markwalling.org
Do you have a line similar to the following in your sshd_config file?

Code:
Subsystem sftp  /usr/libexec/sftp-server


sshd_config(5) wrote:
Subsystem
Configures an external subsystem (e.g. file transfer daemon).
Arguments should be a subsystem name and a command (with optional
arguments) to execute upon subsystem request.

The command sftp-server(8) implements the ``sftp'' file transfer
subsystem.

Alternately the name ``internal-sftp'' implements an in-process
``sftp'' server. This may simplify configurations using
ChrootDirectory to force a different filesystem root on clients.

By default no subsystems are defined. Note that this option
applies to protocol version 2 only.


Top
   
Display posts from previous:  Sort by  
Post new topic  Reply to topic


Who is online

Users browsing this forum: No registered users and 4 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum

Search for:
Jump to:  
RSS

Powered by phpBB® Forum Software © phpBB Group