| View previous topic :: View next topic |
| Author |
Message |
mikkoc
Apprentice
Joined: 24 May 2007
Posts: 231
|
 Posted: Sun Aug 29, 2010 1:17 pm Post subject: Problem after upgrading to proftpd-1.3.3a |
 |
|
After I upgraded to proftpd-1.3.3a none of the users on my server are able to login anymore.
No problems at all with proftpd 1.3.2d. No configuration changes.
proftpd.conf: https://bugs.gentoo.org/attachment.cgi?id=244995&action=view
output of "proftpd -n -d 10": https://bugs.gentoo.org/attachment.cgi?id=244993&action=view
This should be the relevant part:
| Quote: | 127.0.0.1 (127.0.0.1[127.0.0.1]) - wtmp /var/log/wtmp: Permission denied
127.0.0.1 (127.0.0.1[127.0.0.1]) - opening TransferLog '/var/log/xferlog'
127.0.0.1 (127.0.0.1[127.0.0.1]) - unable to open TransferLog '/var/log/xferlog': Permission denied
127.0.0.1 (127.0.0.1[127.0.0.1]) - setting group IDs: 1000, 1, 5, 10, 12, 13, 15, 17, 18, 19, 26, 27, 80, 85, 1002, 1004, 1005, 35, 1006, 1007, 16, 1008, 123, 245
127.0.0.1 (127.0.0.1[127.0.0.1]) - error: unable to set groups: Operation not permitted
127.0.0.1 (127.0.0.1[127.0.0.1]) - RELINQUISH PRIVS at mod_auth.c:1182
127.0.0.1 (127.0.0.1[127.0.0.1]) - USER PRIVS 1000 at mod_auth.c:612
127.0.0.1 (127.0.0.1[127.0.0.1]) - retrieved UID 1000 for user 'mikko'
127.0.0.1 (127.0.0.1[127.0.0.1]) - RELINQUISH PRIVS at mod_auth.c:616
127.0.0.1 (127.0.0.1[127.0.0.1]) - set TZ environment variable to 'CET'
127.0.0.1 (127.0.0.1[127.0.0.1]) - Preparing to chroot to directory '/home/mikko'
127.0.0.1 (127.0.0.1[127.0.0.1]) - ROOT PRIVS at auth.c:1352
127.0.0.1 (127.0.0.1[127.0.0.1]) - RELINQUISH PRIVS at auth.c:1354
127.0.0.1 (127.0.0.1[127.0.0.1]) - chroot to '/home/mikko' failed for user 'mikko': Funzione non implementata
127.0.0.1 (127.0.0.1[127.0.0.1]) - error: unable to set default root directory
127.0.0.1 (127.0.0.1[127.0.0.1]) - wtmp /var/log/wtmp: Permission denied
127.0.0.1 (127.0.0.1[127.0.0.1]) - FTP session closed. |
USE flags
| Quote: | * net-ftp/proftpd
Use flags: (acl) (-authfile) (-ban) (caps) (-case) (-clamav) (ctrls)
(-deflate) (-doc) (-exec) (-hardened) (-ident) (-ifsession) (-ipv6) (-kerberos)
(-ldap) (-mysql) (ncurses) (nls) (-pam) (-postgres) (-radius) (ratio) (-readme)
(-rewrite) (-selinux) (sftp) (shaper) (-sitemisc) (-softquota) (ssl) (tcpd)
(-trace) (-vroot) (-xinetd) |
Thanks |
|
| Back to top |
|
 |
gerdesj
l33t
Joined: 29 Sep 2005
Posts: 622
Location: Yeovil, Somerset, UK
|
| Posted: Sun Sep 05, 2010 10:13 pm Post subject: Re: Problem after upgrading to proftpd-1.3.3a |
|
|
Is this still a problem - I have a few ideas?
Cheers
Jon |
|
| Back to top |
|
|
mikkoc
Apprentice
Joined: 24 May 2007
Posts: 231
|
| Posted: Sat Oct 09, 2010 6:09 am Post subject: |
|
|
gerdesj, yes it is.
I upgraded to proftpd 1.3.3b but the issue remains 
Thanks |
|
| Back to top |
|
|
gerdesj
l33t
Joined: 29 Sep 2005
Posts: 622
Location: Yeovil, Somerset, UK
|
| Posted: Sun Oct 10, 2010 11:42 am Post subject: |
|
|
My Italian is pretty bad, but I suspect that this:
127.0.0.1 (127.0.0.1[127.0.0.1]) - chroot to '/home/mikko' failed for user 'mikko': Funzione non implementata
means "function not implemented", so the chroot call fails. That might be caused by a USE flag not present.
There are a lot of permissions related errors in the log you posted as well.
Would it be possible to see your /etc/proftpd/proftpd.conf (suitably anonymized if you wish) please?
Cheers
Jon |
|
| Back to top |
|
|
mikkoc
Apprentice
Joined: 24 May 2007
Posts: 231
|
| Posted: Sun Oct 10, 2010 11:45 am Post subject: |
|
|
Yes, it's in my first post:
https://bugs.gentoo.org/attachment.cgi?id=244995&action=view
I also image it's a (group?) permission problem, but I didn't change anything on my system and it worked with previous proftpd versions (now I'm using 1.3.2d and it works)
And yes, you're right "function not implemented" is correct. |
|
| Back to top |
|
|
gerdesj
l33t
Joined: 29 Sep 2005
Posts: 622
Location: Yeovil, Somerset, UK
|
| Posted: Sun Oct 10, 2010 12:04 pm Post subject: |
|
|
To be honest I ended up using vsftpd a couple of years ago, I think because I could get it to work nicely with PAM and Samba. My customer wanted AD groups to control access.
However, you're on ProFTPd and its a bit rude to suggest a change! I am just emerging it to my laptop, I'll see if I can replicate your problem and then we'll get to the fix ...
Cheers
Jon |
|
| Back to top |
|
|
gerdesj
l33t
Joined: 29 Sep 2005
Posts: 622
Location: Yeovil, Somerset, UK
|
| Posted: Sun Oct 10, 2010 12:27 pm Post subject: |
|
|
Right, I get a log file that looks pretty much like yours so that's a good start!
Cheers
Jon |
|
| Back to top |
|
|
mikkoc
Apprentice
Joined: 24 May 2007
Posts: 231
|
| Posted: Sun Oct 10, 2010 12:37 pm Post subject: |
|
|
Removing:
fixes the problem!
The permission errors remain, but at least I can login 
Can you confirm it? |
|
| Back to top |
|
|
gerdesj
l33t
Joined: 29 Sep 2005
Posts: 622
Location: Yeovil, Somerset, UK
|
| Posted: Sun Oct 10, 2010 12:59 pm Post subject: |
|
|
| gerdesj wrote: | Right, I get a log file that looks pretty much like yours so that's a good start!
Cheers
Jon |
I added the pam USE flag which seems to help rather a lot.
Cheers
Jon |
|
| Back to top |
|
|
|
Networking & Security
