sslug-teknik team mailing list archive
-
sslug-teknik team
-
Mailing list archive
-
Message #32609
Proftpd igen...
Håber proftpd er ligeså sikker som jeg har problemer med den...
Kan fint starte den, men ikke logge ind.
Bruger source version, har i /etc/pam.d/ftp indsat
auth required /lib/security/pam_listfile.so item=user
sense=deny file=
auth required /lib/security/pam_pwdb.so shadow nullok
account required /lib/security/pam_pwdb.so
session required /lib/security/pam_pwdb.so
Hmm, opdager lige 'auth ... file='; aner ikke om der skal stå noget her?
Kører pt. ikke fra inetd eller tcp-wrapper, derfor ingenting i
inetd.conf .
/etc/proftpd.conf :
ServerName "Onscreen.zzz FTP Server"
#ServerType inetd
ServerType standalone
DefaultServer on
DefaultRoot /home/ftp
UseReverseDNS off
ServerIdent off
Port 21
Umask 022
AuthPAMAuthoritative On
PAMConfig ftp
DeferWelcome off
TimeoutLogin 120
TimeoutIdle 600
TimeoutNoTransfer 900
TimeoutStalled 3600
User ftp
Group ftp
AllowOverwrite on
RequireValidShell no
ScoreboardPath /var/run/proftpd
TransferLog /var/log/proftpd/xferlog.legacy
LogFormat default "%h %l %u %t \"%r\" %s %b"
LogFormat auth ".%v [%P] %h %t \"%r\" %s"
LogFormat write "%h %l %u %t \"%r\" %s %b"
<Global>
DisplayLogin welcome.msg
DisplayFirstChdir readme
AllowOverwrite yes
IdentLookups off
ExtendedLog /var/log/proftpd/access.log
ExtendedLog /var/log/proftpd/auth.log AUTH
#auth
</Global>
grep ftp /etc/group; grep ftp /etc/passwd
ftp:x:50:monz,ftp
ftp:x:14:50:FTP User:/home/ftp:
Har password på user ftp.
ls -ld /home/ftp/
drwxrw-r-- 2 root ftp 4096 Jan 23 23:10 /home/ftp/
Ved login med ftp får jeg:
421 Service not available, remote server has closed connection
Login failed.
No control connection for command: No such file or directory
/var/log/proftpd/auth.log siger:
UNKNOWN ftp [25/Jan/2001:00:04:50 +0100] "USER ftp" 331 -
Har prøvet med andre brugere; både med/uden at ændre User/Group i conf.
--
Regards,
Mogens Valentin
Networking - Security - Programming
Linux configuration and troubleshooting
http://www.danbbs.dk/~monz - monz@xxxxxxxxx
Follow ups