| View previous topic :: View next topic |
| Author |
Message |
TenPin
Guru
Joined: 26 Aug 2002
Posts: 500
Location: Kansas City
|
 Posted: Wed Nov 12, 2003 3:40 am Post subject: vsftpd - virtual users |
 |
|
I can't get vsftpd virtual users support, I've tried following the instructions with no luck:
/etc/vsftpd/vsftpd.conf :
| Code: |
anon_world_readable_only=NO
anonymous_enable=NO
chroot_local_user=YES
guest_enable=YES
guest_username=ftp
hide_ids=YES
listen=YES
listen_address=192.168.0.1
local_enable=YES
max_clients=3
max_per_ip=1
nopriv_user=ftp
pasv_max_port=65535
pasv_min_port=64000
session_support=NO
use_localtime=YES
user_config_dir=/etc/vsftpd/users
userlist_enable=YES
userlist_file=/etc/vsftpd/denied
xferlog_enable=YES
anon_umask=0027
async_abor_enable=YES
connect_from_port_20=YES
dirlist_enable=NO
download_enable=NO
|
~/logins :
db4_load -T -t hash -f ~/logins /etc/vsftpd/accounts.db
I also tried this using db_load from db version 3.1
| Code: |
/etc/pam.d/ftp :auth required /lib/security/pam_userdb.so db=/etc/vsftpd/accounts
account required /lib/security/pam_userdb.so db=/etc/vsftpd/accounts
|
/etc/vsftpd/users/test :
| Code: |
anon_mkdir_write_enable=NO
anon_other_write_enable=NO
anon_upload_enable=NO
dirlist_enable=YES
download_enable=YES
local_root=/home/ftp
write_enable=NO
|
When I connect I get :
Connecting to 192.168.0.1...
(vsFTPd 1.2.0)
Login incorrect.
Could not open host helix: username and/or password was not accepted for login.
I'm running vstpd 1.2 as root as a listen server, not via xinetd.
Any help would be appreciated. |
|
| Back to top |
|
 |
UberLord
Retired Dev
Joined: 18 Sep 2003
Posts: 6835
Location: Blighty
|
| Posted: Wed Nov 12, 2003 10:22 am Post subject: |
|
|
Sounds like you're suffering from this bug
Basically you can't do virtual users in vsftpd in gentoo at this time.
As I really hate pure-ftpd I've gone back to good old proftpd. Good because it's feature rich and easy to configure - old because you've gotta constantly patch it as it's had a rather chequered history of security updates  |
|
| Back to top |
|
|
TenPin
Guru
Joined: 26 Aug 2002
Posts: 500
Location: Kansas City
|
| Posted: Thu Nov 13, 2003 9:39 am Post subject: |
|
|
| Thanks, I'll give proFTP a try, I didn't want to try it until I'd tried every last resort for vsftpd tho because I believe its the best ftpd. |
|
| Back to top |
|
|
UberLord
Retired Dev
Joined: 18 Sep 2003
Posts: 6835
Location: Blighty
|
| Posted: Thu Nov 13, 2003 9:53 am Post subject: |
|
|
I agree with you there 
IF only it supported TLS and allowed ftp without shell then I'd be very very happy |
|
| Back to top |
|
|
Fraggle
Apprentice
Joined: 13 Mar 2003
Posts: 187
Location: Washington, DC
|
| Posted: Thu Nov 13, 2003 3:38 pm Post subject: |
|
|
| UberLord wrote: | I agree with you there
IF only it supported TLS and allowed ftp without shell then I'd be very very happy |
ProFTPD |
|
| Back to top |
|
|
UberLord
Retired Dev
Joined: 18 Sep 2003
Posts: 6835
Location: Blighty
|
| Posted: Thu Nov 13, 2003 4:02 pm Post subject: |
|
|
| Fraggle wrote: | | UberLord wrote: | I agree with you there
IF only it supported TLS and allowed ftp without shell then I'd be very very happy |
ProFTPD |
I believe I suggested ProFTPD in a prior post in this thread  |
|
| Back to top |
|
|
pharaoh
Apprentice
Joined: 20 Nov 2003
Posts: 211
Location: Pennsylvania
|
| Posted: Fri Dec 19, 2003 4:30 am Post subject: |
|
|
| well at least i only wasted 2 hours trying to setup virtual users under vsftpd instead of 3. Maybe I'll use vsftpd on one port for shell user's uncapped speed ftp and pro-ftpd on a diff port for virtual user's capped rate? |
|
| Back to top |
|
|
joyeux
n00b
Joined: 18 Mar 2003
Posts: 11
Location: The Czech Republic
|
| Posted: Thu Mar 11, 2004 12:12 am Post subject: problem is in pam's ./configure |
|
|
pam_userdb.so is compiled wrong way, ./configure setups it to use libndbm instead of db4. The easiest way is
$ emerge unmerge db
to unmerge all dbX. Then
$ emerge pam
pam now compiles with db4 (which is bundled with pam).
Then
$ emerge db
and create userdb database using db4.1_load
in /etc/pam.d/vsftpd don't use extension .db in path;
try ftp login and then look at syslog output.
after three days it works!!!
_________________
joyeux |
|
| Back to top |
|
|
|
Networking & Security
