Re: [CentOS] vsftpd rejects users set to nologin

2019-01-10 Thread Nicolas Kovacs
Le 10/01/2019 à 22:17, Stephen John Smoogen a écrit : > I updated to CentOS 7.6 and something must have changed in the base > OS setup that prevents vsftpd from allowing logins for accounts > with /sbin/nologin as their shell. Maybe this could be your solution. Here's the relevant lines from my v

Re: [CentOS] vsftpd rejects users set to nologin

2019-01-10 Thread Kenneth Porter
I think the pam_shells test is really a lazy test for daemons. There's already a blacklist in /etc/vsftpd/user_list but it's incomplete. (It lacks a LOT of common system services such as named, sshd, and dbus.) I suggest replacing pam_shells with a test for UID < 1000: authrequired

Re: [CentOS] vsftpd rejects users set to nologin

2019-01-10 Thread Kenneth Porter
More digging (now that I have a better handle on how to ask the question) reveals this bug against documentation and release notes for 7.6 to alert updaters about this breaking change for vsftpd: https://bugzilla.redhat.com/show_bug.cgi?id=1647485 The last comment there, #15 by "Roy": For a

Re: [CentOS] vsftpd rejects users set to nologin

2019-01-10 Thread Kenneth Porter
--On Thursday, January 10, 2019 4:17 PM -0500 Stephen John Smoogen wrote: So I think this is a side effect of a long term argument of the security nature of /sbin/nologin https://serverfault.com/questions/328395/nologin-in-etc-shells-is-dangero us-why https://lists.fedoraproject.org/archives/

Re: [CentOS] vsftpd rejects users set to nologin

2019-01-10 Thread Stephen John Smoogen
On Thu, 10 Jan 2019 at 16:09, Kenneth Porter wrote: > I updated to CentOS 7.6 and something must have changed in the base OS > setup that prevents vsftpd from allowing logins for accounts with > /sbin/nologin as their shell. I had to add that to /etc/shells so that > such > accounts could FTP ag

[CentOS] vsftpd rejects users set to nologin

2019-01-10 Thread Kenneth Porter
I updated to CentOS 7.6 and something must have changed in the base OS setup that prevents vsftpd from allowing logins for accounts with /sbin/nologin as their shell. I had to add that to /etc/shells so that such accounts could FTP again. That file is in the setup package. Did it include /sbin

Re: [CentOS] Vsftpd vs. iptables firewall script

2018-05-25 Thread Nels Lindquist
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 2018/05/23 8:24 AM, Nicolas Kovacs wrote: > I'm currently setting up a local FTP server, to receive disk images > sent with G4L (Ghost4Linux). > > This server has been running Slackware Linux before, and the > Vsftpd setup was relatively simple. >

Re: [CentOS] Vsftpd vs. iptables firewall script

2018-05-24 Thread Nicolas Kovacs
Le 23/05/2018 à 17:01, Pete Biggs a écrit : > FTP uses two ports - in active mode the server uses 21 for command and > 20 for data after the initial connection. In passive mode it uses 21 > for command and a high random port number for data. What is happening > is that you are blocking the high por

Re: [CentOS] Vsftpd vs. iptables firewall script

2018-05-23 Thread m . roth
Nicolas Kovacs wrote: > Le 23/05/2018 à 16:58, m.r...@5-cent.us a écrit : >> A suggestion: once you've got the firewall issue dealt with, set selinux >> into permissive mode; *then* you can figure out what it's complaining >> about, while at the same time, your system will be available. Once >> you

Re: [CentOS] Vsftpd vs. iptables firewall script

2018-05-23 Thread Nicolas Kovacs
Le 23/05/2018 à 16:58, m.r...@5-cent.us a écrit : > A suggestion: once you've got the firewall issue dealt with, set selinux > into permissive mode; *then* you can figure out what it's complaining > about, while at the same time, your system will be available. Once you've > fixed those issues, then

Re: [CentOS] Vsftpd vs. iptables firewall script

2018-05-23 Thread Nicolas Kovacs
Le 23/05/2018 à 17:01, Pete Biggs a écrit : > You could use active transfer and open port 20, or you could use > passive, which is more "secure", and allow connections to high port > numbers. > > Search for active vs passive ftp for more info. That helped, thanks. I added the following to /etc/v

Re: [CentOS] Vsftpd vs. iptables firewall script

2018-05-23 Thread m . roth
Nicolas Kovacs wrote: > Hi, > > I'm currently setting up a local FTP server, to receive disk images sent > with G4L (Ghost4Linux). > > This server has been running Slackware Linux before, and the Vsftpd > setup was relatively simple. > > With CentOS things seem to be slightly different, so I'm curr

Re: [CentOS] Vsftpd vs. iptables firewall script

2018-05-23 Thread m . roth
Nicolas Kovacs wrote: > Le 23/05/2018 à 16:36, Nux! a écrit : >> Try "iptables -I INPUT" for your FTP rule. > > Doesn't work. I redirected all my errors to /var/log/messages, so here's > what I get when I try to connect Filezilla to that server. > > May 23 16:48:58 c7-server kernel: +++ IPv4 packet

Re: [CentOS] Vsftpd vs. iptables firewall script

2018-05-23 Thread Stephen John Smoogen
On 23 May 2018 at 11:05, Stephen John Smoogen wrote: > On 23 May 2018 at 10:24, Nicolas Kovacs wrote: >> Hi, >> >> I'm currently setting up a local FTP server, to receive disk images sent >> with G4L (Ghost4Linux). >> >> This server has been running Slackware Linux before, and the Vsftpd >> setup

Re: [CentOS] Vsftpd vs. iptables firewall script

2018-05-23 Thread Stephen John Smoogen
On 23 May 2018 at 10:24, Nicolas Kovacs wrote: > Hi, > > I'm currently setting up a local FTP server, to receive disk images sent > with G4L (Ghost4Linux). > > This server has been running Slackware Linux before, and the Vsftpd > setup was relatively simple. > > With CentOS things seem to be sligh

Re: [CentOS] Vsftpd vs. iptables firewall script

2018-05-23 Thread Pete Biggs
> Doesn't work. I redirected all my errors to /var/log/messages, so here's > what I get when I try to connect Filezilla to that server. > > May 23 16:48:58 c7-server kernel: +++ IPv4 packet rejected +++ IN=enp0s3 > OUT= MAC=08:00:27:00:00:03:d4:85:64:b2:b2:1b:08:00 SRC=192.168.2.2 > DST=192.168.2

Re: [CentOS] Vsftpd vs. iptables firewall script

2018-05-23 Thread Nicolas Kovacs
Le 23/05/2018 à 16:36, Nux! a écrit : > Try "iptables -I INPUT" for your FTP rule. Doesn't work. I redirected all my errors to /var/log/messages, so here's what I get when I try to connect Filezilla to that server. May 23 16:48:58 c7-server kernel: +++ IPv4 packet rejected +++ IN=enp0s3 OUT= MAC=

Re: [CentOS] Vsftpd vs. iptables firewall script

2018-05-23 Thread Nux!
Hi, Try "iptables -I INPUT" for your FTP rule. -- Sent from the Delta quadrant using Borg technology! Nux! www.nux.ro - Original Message - > From: "Nicolas Kovacs" > To: "CentOS mailing list" > Sent: Wednesday, 23 May, 2018 15:24:45 > Subj

[CentOS] Vsftpd vs. iptables firewall script

2018-05-23 Thread Nicolas Kovacs
Hi, I'm currently setting up a local FTP server, to receive disk images sent with G4L (Ghost4Linux). This server has been running Slackware Linux before, and the Vsftpd setup was relatively simple. With CentOS things seem to be slightly different, so I'm currently trying to work things out. For

Re: [CentOS] vsftpd broken (Resolved)

2016-08-15 Thread Günther J . Niederwimmer
Hello, Am Montag, 15. August 2016, 18:24:31 schrieb Eero Volotinen: > You could try setting in vsftpd.conf: > *use_sendfile=NO--* Now I found the Problem it is a broken add on for firefox ?? With new installed Filezilla it is working .. Don't use the the add on for firefox ... Than

Re: [CentOS] vsftpd broken ?

2016-08-15 Thread Eero Volotinen
You could try setting in vsftpd.conf: *use_sendfile=NO--* *Eero* 2016-08-15 18:17 GMT+03:00 Günther J. : > Hello, > > Am Montag, 15. August 2016, 18:11:56 schrieb Eero Volotinen: > > Sounds like hardware failure (memory, disk) or network problem. > > On all tested Systems ;-) and I mean I fo

Re: [CentOS] vsftpd broken ?

2016-08-15 Thread Günther J . Niederwimmer
Hello, Am Montag, 15. August 2016, 18:11:56 schrieb Eero Volotinen: > Sounds like hardware failure (memory, disk) or network problem. On all tested Systems ;-) and I mean I found 100 Messages in Goo... with the same Problem ?? > > 2016-08-15 16:20 GMT+03:00 Günther J. : > > Hello, > > > >

Re: [CentOS] vsftpd broken ?

2016-08-15 Thread Eero Volotinen
Sounds like hardware failure (memory, disk) or network problem. -- Eero 2016-08-15 16:20 GMT+03:00 Günther J. : > Hello, > > CentOS 7.2 > > have any a workaround for this Error ? > > vsftpd Error:426 failure Reading Network STream > > after transfer I have a broken file on the ftp Server > > I

[CentOS] vsftpd broken ?

2016-08-15 Thread Günther J . Niederwimmer
Hello, CentOS 7.2 have any a workaround for this Error ? vsftpd Error:426 failure Reading Network STream after transfer I have a broken file on the ftp Server I mean I have found a newer Version 3.0.3 bot not for CentOS 7.2 but I cant say is this Problem corrected in 3.0.3? Any hint please ;

Re: [CentOS] Vsftpd configuration problem

2013-04-02 Thread SilverTip257
On Mon, Apr 1, 2013 at 8:04 PM, Max Pyziur wrote: > > > [root@srv-rhsoft:~]$ cat /etc/sysconfig/iptables-config > > # Load additional iptables modules (nat helpers) > > # Default: -none- > > # Space separated list of nat helpers (e.g. 'ip_nat_ftp ip_nat_irc'), > which > > # are loaded after the

Re: [CentOS] Vsftpd configuration problem

2013-04-01 Thread Banyan He
Hi Max, It looks like a network issue instead of the software. Falling back to PORT sounds like to ACTIVE mode from PASV mode. In PASV, you will be connecting to a random port told by server with a random port from your side. Do you have a firewall to block such traffic that the system will se

Re: [CentOS] Vsftpd configuration problem

2013-04-01 Thread Max Pyziur
On Tue, 2 Apr 2013, Reindl Harald wrote: > > > Am 02.04.2013 01:25, schrieb Max Pyziur: >> On Tue, 2 Apr 2013, Reindl Harald wrote: >> >>> >>> >>> Am 02.04.2013 01:12, schrieb Max Pyziur: Beginning today, I started to receive the following when ftp'ing to my CentOS 6 machine: ncftp

Re: [CentOS] Vsftpd configuration problem - followup

2013-04-01 Thread Max Pyziur
On Tue, 2 Apr 2013, Reindl Harald wrote: > > > Am 02.04.2013 01:12, schrieb Max Pyziur: >> Beginning today, I started to receive the following when ftp'ing to my >> CentOS 6 machine: >> ncftp /home/pyz2 > dir >> connect failed: No route to host. >> connect failed: No route to host. >> connect fail

Re: [CentOS] Vsftpd configuration problem

2013-04-01 Thread Max Pyziur
On Mon, 1 Apr 2013, lists-centos wrote: > > > Original Message >> Date: Monday, April 01, 2013 07:12:53 PM -0400 >> From: Max Pyziur >> To: centos@centos.org >> Cc: >> Subject: [CentOS] Vsftpd configuration problem >> >>

Re: [CentOS] Vsftpd configuration problem

2013-04-01 Thread Max Pyziur
On Tue, 2 Apr 2013, Reindl Harald wrote: > > > Am 02.04.2013 01:12, schrieb Max Pyziur: >> Beginning today, I started to receive the following when ftp'ing to my >> CentOS 6 machine: >> ncftp /home/pyz2 > dir >> connect failed: No route to host. >> connect failed: No route to host. >> connect fail

[CentOS] Vsftpd configuration problem

2013-04-01 Thread Max Pyziur
Greetings, Beginning today, I started to receive the following when ftp'ing to my CentOS 6 machine: ncftp /home/pyz2 > dir connect failed: No route to host. connect failed: No route to host. connect failed: No route to host. Falling back to PORT instead of PASV mode. I can make a connection, bu

Re: [CentOS] vsftpd log issues

2012-01-04 Thread Lorenzo Quatrini
Il 03/01/2012 04:14, Nataraj ha scritto: >> >> Ok, the above works now. But while the setting was (by default) commented >> out, the default wasn't /var/log/vsftpd.log but /var/log/xferlog which >> was growing without limits (it was over 6 GB when I first time noticed the >> problem) since logr

Re: [CentOS] vsftpd log issues

2012-01-02 Thread Nataraj
On 12/31/2011 02:48 AM, Timo Neuvonen wrote: > I have an up-to-date CentOS 6 with reasonable amount of ftp activity (a > dozen of network cameras uploading images every second 24x7). > > The first issue was that the whole /var filesystem was about to get full, > because of huge ftp daemon log. > >

[CentOS] vsftpd log issues

2011-12-31 Thread Timo Neuvonen
I have an up-to-date CentOS 6 with reasonable amount of ftp activity (a dozen of network cameras uploading images every second 24x7). The first issue was that the whole /var filesystem was about to get full, because of huge ftp daemon log. vsftpd.conf says: # You may override where the log file

Re: [CentOS] vsftpd Configuration

2011-12-17 Thread Christopher Mills
You could do a chroot jail http://wiki.centos.org/HowTos/Chroot_Vsftpd_with_non-system_users Or are you looking for something else? -Chris On Dec 17, 2011, at 7:22 PM, Al Sparks wrote: > Is there a way to configure vsftpd to limit where you can chdir to? > === Al >

[CentOS] vsftpd Configuration

2011-12-17 Thread Al Sparks
Is there a way to configure vsftpd to limit where you can chdir to?     === Al ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] VSFTPD passive mode is not working

2011-11-06 Thread Fawzy Ibrhim
Yes; it was an issue with Linux kernel 2.6.18-274.*.el5.centos.plus ; so I switched back to Linux kernel  2.6.18-238.19.1.el5.centos.plus and it's working now. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] VSFTPD passive mode is not working

2011-10-26 Thread Matt Warren
>> Any suggestion? > possibly: > https://bugzilla.redhat.com/show_bug.cgi?id=740399 > I believe I've run into this problem/that bug as well. As a workaround, I found that adding the following helped. pasv_enable=YES pasv_min_port=35000 pasv_max_port=36000 pasv_address=xxx.xxx.xxx.xxx If you are

Re: [CentOS] VSFTPD passive mode is not working

2011-10-26 Thread Tru Huynh
On Wed, Oct 26, 2011 at 04:37:37AM -0700, Fawzy Ibrhim wrote: > I have Centos 5.7 64bit; I have installed vsftpd as standalone service and > using it for two years now with no problem. Suddenly; only it works with > active mode. The passive mode stops working and gives time out. Firewall is > di

[CentOS] VSFTPD passive mode is not working

2011-10-26 Thread Fawzy Ibrhim
I have Centos 5.7 64bit; I have installed vsftpd as standalone service and using it for two years now with no problem. Suddenly; only it works with active mode. The passive mode stops working and gives time out. Firewall is disabled and SELinux is set to permissive. I ran tcpdump and I noticed

Re: [CentOS] vsftpd saving uploads twice

2010-04-08 Thread Kai Schaetzl
Dirk H. Schulz wrote on Thu, 08 Apr 2010 14:55:26 +0200: > Since the source is no way to go Try harder. I'm sure you'll get a response sooner or later. You could also bug it at both the CentOS and RHEL bugzilla. You will need to give clear reproduction instructions. Kai -- Get your web at Co

Re: [CentOS] vsftpd saving uploads twice

2010-04-08 Thread Dirk H. Schulz
Kai, Am 08.04.10 12:31, schrieb Kai Schaetzl: > Dirk H. Schulz wrote on Thu, 08 Apr 2010 11:29:53 +0200: > > Can you please stop this? You are repeating your messages to the list with > slightly changed subjects and content because you apprently don't get the > answers you want. This is unfriendly

Re: [CentOS] vsftpd saving uploads twice

2010-04-08 Thread Kai Schaetzl
Dirk H. Schulz wrote on Thu, 08 Apr 2010 11:29:53 +0200: Can you please stop this? You are repeating your messages to the list with slightly changed subjects and content because you apprently don't get the answers you want. This is unfriendly, please stop this! And spare lame excuses. Did you

[CentOS] vsftpd saving uploads twice

2010-04-08 Thread Dirk H. Schulz
I have configured my vsftpd instances to use virtual users and map them to a system user. So all uploads should be written with owner and group of this system user (let's call it ftpsystemuser). But in the the last weeks/months it appears that uploads are written twice, on instance as it should

Re: [CentOS] vsftpd writing files 2 times - once as root

2010-04-06 Thread Stephen John Smoogen
On Tue, Apr 6, 2010 at 12:58 PM, Dirk H. Schulz wrote: > I have configured my vsftpd with virtual users all of which are mapped > to a system user for file system permissions (let's call him > 'ftpsystemuser'). What is the vsftpd process running as? It is most likely root as it needs to have perm

[CentOS] vsftpd writing files 2 times - once as root

2010-04-06 Thread Dirk H. Schulz
I have configured my vsftpd with virtual users all of which are mapped to a system user for file system permissions (let's call him 'ftpsystemuser'). That means, if someone uploads files they are writting using owner and group of the system user: > -rw-r--r-- 1 ftpsystemuser ftpsystemuser 19968

Re: [CentOS] VSFTPD accepting same user/session from different IP addresses

2010-03-22 Thread Kai Schaetzl
Dirk H. Schulz wrote on Mon, 22 Mar 2010 15:41:55 +0100: > makes me think that the same session with the same commands is > "delivered" via 2 outgoing gateways, because it would be very > complicated to have two ftp clients issue the same command in the same > second. Know what I mean? No, I d

Re: [CentOS] VSFTPD accepting same user/session from different IP addresses

2010-03-22 Thread Dirk H. Schulz
Hi Kai, Am 22.03.10 15:31, schrieb Kai Schaetzl: > Dirk H. Schulz wrote on Mon, 22 Mar 2010 13:41:50 +0100: > > >> What I am concerned about is the fact that the client sends out using >> various gateways at once. Is there some configuration item in VSFTPD >> which can prevent this and reject

Re: [CentOS] VSFTPD accepting same user/session from different IP addresses

2010-03-22 Thread Kai Schaetzl
Dirk H. Schulz wrote on Mon, 22 Mar 2010 13:41:50 +0100: > What I am concerned about is the fact that the client sends out using > various gateways at once. Is there some configuration item in VSFTPD > which can prevent this and reject packets from the additional ip addresses? Note, this is not

[CentOS] VSFTPD accepting same user/session from different IP addresses

2010-03-22 Thread Dirk H. Schulz
Hi folks, I have found the following in my logs: Wed Mar 10 15:52:33 2010 [pid 15232] [uploaduser] OK MKDIR: Client "195.200.70.*40*", "/04 LV gelieferte Daten 04_2010/04 LV Seiten/Jungz?chter" Wed Mar 10 15:52:33 2010 [pid 15231] [uploaduser] FAIL MKDIR: Client "195.200.70.*41*", "/04 LV gel

Re: [CentOS] vsftpd question

2009-11-16 Thread Les Mikesell
John R Pierce wrote: > Les Mikesell wrote: >> I'd consider starting things at boot time to be as unrelated as you can >> get. There's next to nothing in common between bsd and sysV oriented >> systems (I think the ones you mention are mostly sysV-ish). And the ftp >> config concepts go with th

Re: [CentOS] vsftpd question

2009-11-16 Thread John R Pierce
Les Mikesell wrote: > I'd consider starting things at boot time to be as unrelated as you can > get. There's next to nothing in common between bsd and sysV oriented > systems (I think the ones you mention are mostly sysV-ish). And the ftp > config concepts go with the choice of the application

Re: [CentOS] vsftpd question

2009-11-16 Thread Les Mikesell
m.r...@5-cent.us wrote: >> mark wrote: >>> I got the book, and followed the directions. I, and others, have pointed >>> you to dtuff, Viktor. You say you've not run a server in a while, and that >>> "every OS is different." I'm assuming that means you ran Windows > servers, and have >>> not yet tak

Re: [CentOS] vsftpd question

2009-11-16 Thread m . roth
> mark wrote: >> >> I got the book, and followed the directions. I, and others, have pointed >> you to dtuff, Viktor. You say you've not run a server in a while, and that >> "every OS is different." I'm assuming that means you ran Windows servers, and have >> not yet taken enough time to actually l

Re: [CentOS] vsftpd question

2009-11-16 Thread Les Mikesell
mark wrote: > > I got the book, and followed the directions. I, and others, have pointed you > to > stuff, Viktor. You say you've not run a server in a while, and that "every OS > is different." I'm assuming that means you ran Windows servers, and have not > yet taken enough time to actually l

Re: [CentOS] vsftpd question

2009-11-16 Thread mark
Jim Perrin wrote: > On Fri, Nov 13, 2009 at 2:16 PM, Victor Subervi > wrote: >> Hi; >> I've learned how to add a user and change the root dir of vsftpd (which of >> course is undocumented). Now I need to learn how to make it so that a given >> user can only access his/her folder (within the root

Re: [CentOS] vsftpd question

2009-11-14 Thread John R Pierce
> They don't have to scroll down. Just a "thank you!" and goodbye. "Thank You" did you have to scroll down to read that? More important than top vs bottom is EDITING THE QUOTED PORTION OF THE MESSAGE. ___ CentOS mailing list CentOS@centos.org http

Re: [CentOS] vsftpd question

2009-11-14 Thread Drew
>> Please stop being rude to the members of this list. > > I am not being rude in the least. Perhaps it is because email is so > difficult to communicate attitudes, as we all know, that you are viewing > things one way while I am saying them another. At any rate, please accept my > apologies, altho

Re: [CentOS] vsftpd question

2009-11-14 Thread Jim Perrin
A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing? A: Top-posting. Q: What is the most annoying thing in e-mail? On Sat, Nov 14, 2009 at 8:15 AM, Victor Subervi wrote: > Ok. It's "the law". Now, what is the __logic__ behind not top post

Re: [CentOS] vsftpd question

2009-11-14 Thread Victor Subervi
On Sat, Nov 14, 2009 at 7:01 AM, John R. Dennison wrote: > On Sat, Nov 14, 2009 at 05:45:34AM -0500, Victor Subervi wrote: > > > > Now, forgive me, but that seems anal. What's the rationale there? > >While that may seem "anal" to you, it's one of the guidelines >of this and other

Re: [CentOS] vsftpd question

2009-11-14 Thread John R. Dennison
On Sat, Nov 14, 2009 at 05:45:34AM -0500, Victor Subervi wrote: > > Now, forgive me, but that seems anal. What's the rationale there? While that may seem "anal" to you, it's one of the guidelines of this and other CentOS mailing lists as specified at: http://www.centos.o

Re: [CentOS] vsftpd question

2009-11-14 Thread Victor Subervi
On Fri, Nov 13, 2009 at 4:31 PM, Jim Perrin wrote: > On Fri, Nov 13, 2009 at 2:16 PM, Victor Subervi > wrote: > > Hi; > > I've learned how to add a user and change the root dir of vsftpd (which > of > > course is undocumented). Now I need to learn how to make it so that a > given > > user can on

Re: [CentOS] vsftpd question

2009-11-14 Thread Victor Subervi
On Fri, Nov 13, 2009 at 4:11 PM, Andrei F wrote: > Hi, > > Take a look at the chroot_list_enable option. It enables you to specify > per-user config. > > http://vsftpd.beasts.org/vsftpd_conf.html Thank you. V ___ CentOS mailing list CentOS@centos.org

Re: [CentOS] vsftpd question

2009-11-14 Thread Victor Subervi
On Fri, Nov 13, 2009 at 3:36 PM, Karanbir Singh wrote: > > I haven't been doing that for quite some time now, except when I'm > > thanking you all for help, in which case I believe it's easier for all > > concerned. Do you disagree? > > dont top post at all. > Now, forgive me, but that seems anal

Re: [CentOS] vsftpd question

2009-11-13 Thread Steven Vishoot
- Original Message > From: Jim Perrin > To: CentOS mailing list > Sent: Fri, November 13, 2009 3:31:42 PM > Subject: Re: [CentOS] vsftpd question > > On Fri, Nov 13, 2009 at 2:16 PM, Victor Subervi wrote: > > Hi; > > I've learned how to add a use

Re: [CentOS] vsftpd question

2009-11-13 Thread Jim Perrin
On Fri, Nov 13, 2009 at 2:16 PM, Victor Subervi wrote: > Hi; > I've learned how to add a user and change the root dir of vsftpd (which of > course is undocumented). Now I need to learn how to make it so that a given > user can only access his/her folder (within the root dir). Please advise. Pleas

Re: [CentOS] vsftpd question

2009-11-13 Thread Andrei F
Hi, Take a look at the chroot_list_enable option. It enables you to specify per-user config. http://vsftpd.beasts.org/vsftpd_conf.html Cheers! -- Andrei On Fri, Nov 13, 2009 at 2:16 PM, Victor Subervi wrote: > Hi; > I've learned how to add a user and change the root dir of vsftpd (which of >

Re: [CentOS] vsftpd question

2009-11-13 Thread Karanbir Singh
On 11/13/2009 08:29 PM, Victor Subervi wrote: > Well, you all pointed me to some documentation that was hardly worthy of > the name. well, did you look at the vsftpd man page and also the config file that is in the package ? I see everything that I need to do all these things very clearly mentio

Re: [CentOS] vsftpd question

2009-11-13 Thread Victor Subervi
On Fri, Nov 13, 2009 at 2:20 PM, Karanbir Singh wrote: > On 11/13/2009 07:16 PM, Victor Subervi wrote: > > Hi; > > I've learned how to add a user and change the root dir of vsftpd (which > > of course is undocumented). Now I need to learn how to make it so that a > > given user can only access his

Re: [CentOS] vsftpd question

2009-11-13 Thread Karanbir Singh
On 11/13/2009 07:16 PM, Victor Subervi wrote: > Hi; > I've learned how to add a user and change the root dir of vsftpd (which > of course is undocumented). Now I need to learn how to make it so that a > given user can only access his/her folder (within the root dir). Please not sure what docs you

[CentOS] vsftpd question

2009-11-13 Thread Victor Subervi
Hi; I've learned how to add a user and change the root dir of vsftpd (which of course is undocumented). Now I need to learn how to make it so that a given user can only access his/her folder (within the root dir). Please advise. TIA, Victor ___ CentOS mai

Re: [CentOS] vsftpd not able to log in

2009-07-11 Thread luc...@lastdot.org
On Fri, Jul 10, 2009 at 3:17 PM, Eugene Vilensky wrote: > Hi folks, > I can't seem to log into my system via > vsftpd.  All other services using PAM are fine...Am I missing something simple? > ftp> user > (username) user > 331 Please specify the password. > Password: > 530 Login incorrect. > > > #

[CentOS] vsftpd not able to log in

2009-07-10 Thread Eugene Vilensky
Hi folks, I can't seem to log into my system via vsftpd. All other services using PAM are fine...Am I missing something simple? ftp> user (username) user 331 Please specify the password. Password: 530 Login incorrect. # getenforce Permissive here is the event in /var/log/audit/audit.log: type

Re: [CentOS] vsFTPd and hidden files - standards compliant?

2009-04-07 Thread John Doe
From: Andrew Hull > I recently received a complaint regarding the vsFTP server I'm running > on a CentOS 4.x box. The complaint was that it is improperly responding > to the LIST command - it is not returning hidden (period prefixed) files > in the directory listing. Hum... not sure if it is

[CentOS] vsFTPd and hidden files - standards compliant?

2009-04-06 Thread Andrew Hull
Hi Folks, I recently received a complaint regarding the vsFTP server I'm running on a CentOS 4.x box. The complaint was that it is improperly responding to the LIST command - it is not returning hidden (period prefixed) files in the directory listing. I investigated and found that vsFTPd would

Re: [CentOS] vsftpd virtual users

2009-02-17 Thread dnk
On 11-Feb-09, at 8:50 AM, dnk wrote: > Well as far as I have made it, it is possible to share a directory by > using a "per user" config option. It is geting hte different > permissions I am having to deal with. Part of me thinks this would be > easier using a real system account so I can restric

Re: [CentOS] vsftpd virtual users

2009-02-17 Thread Steven Tardy
>> USER 1 >> home = /home/ftproot/user1 >> has full read/write access >> >> USER 2 >> home = /home/ftproot/user2 >> has only read/download access mount --bind /home/ftproot/user1 /home/ftproot/user2 ___ CentOS mailing list CentOS@centos.org http://lists.

Re: [CentOS] vsftpd virtual users

2009-02-11 Thread dnk
On 11-Feb-09, at 7:05 AM, Alain Reguera Delgado wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > dnk wrote: > ... >> I just need to have the option to have a "read only" account able to >> access another users directory. There is no main directory that all >> users work out of. > > Do

Re: [CentOS] vsftpd virtual users

2009-02-11 Thread Alain Reguera Delgado
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 dnk wrote: ... > I just need to have the option to have a "read only" account able to > access another users directory. There is no main directory that all > users work out of. Don't know how possible that could be. Remember that each user is in a

Re: [CentOS] vsftpd virtual users

2009-02-10 Thread dnk
On 10-Feb-09, at 3:14 PM, dnk wrote: > > On 10-Feb-09, at 1:30 PM, Alain Reguera Delgado wrote: > >>> I may have found the answer to my own question. just trying it >>> out. >> >> ;^) >> >> Let know your results. >> >> - -- > > No good... the specific setup i found included with the VSFTPD >

Re: [CentOS] vsftpd virtual users

2009-02-10 Thread dnk
On 10-Feb-09, at 1:30 PM, Alain Reguera Delgado wrote: >> I may have found the answer to my own question. just trying it >> out. > > ;^) > > Let know your results. > > - -- No good... the specific setup i found included with the VSFTPD examples won't "quite" do what I needed. and from my

Re: [CentOS] vsftpd virtual users

2009-02-10 Thread Alain Reguera Delgado
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 dnk wrote: ... >> I used some of the info from the wiki, and from >> http://linuxforfun.net/2008/04/05/vsftpd-virtual-users/ ... > I may have found the answer to my own question. just trying it out. ;^) Let know your results. - -- Alain Reguera

Re: [CentOS] vsftpd virtual users

2009-02-10 Thread dnk
On 10-Feb-09, at 1:04 PM, dnk wrote: > > On 10-Feb-09, at 12:06 PM, Alain Reguera Delgado wrote: > >> -BEGIN PGP SIGNED MESSAGE- >> Hash: SHA1 >> >> dnk wrote: >>> Good day all, >>> >>> I have followed the wiki article on setting up vsftpd on centos with >>> virtual users. >> >> Do you re

Re: [CentOS] vsftpd virtual users

2009-02-10 Thread dnk
On 10-Feb-09, at 12:06 PM, Alain Reguera Delgado wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > dnk wrote: >> Good day all, >> >> I have followed the wiki article on setting up vsftpd on centos with >> virtual users. > > Do you refer to: > http://wiki.centos.org/HowTos/Chroot_Vsftpd

Re: [CentOS] vsftpd virtual users

2009-02-10 Thread John R Pierce
dnk wrote: > Good day all, > > I have followed the wiki article on setting up vsftpd on centos with > virtual users. > > I was wondering if anyone had an example of knowledge on how to add > another "readonly" user. I don't want to enable anon access. The issue > I have is that the tutorial (

Re: [CentOS] vsftpd virtual users

2009-02-10 Thread Alain Reguera Delgado
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 dnk wrote: > Good day all, > > I have followed the wiki article on setting up vsftpd on centos with > virtual users. Do you refer to: http://wiki.centos.org/HowTos/Chroot_Vsftpd_with_non-system_users ? > I was wondering if anyone had an example o

[CentOS] vsftpd virtual users

2009-02-10 Thread dnk
Good day all, I have followed the wiki article on setting up vsftpd on centos with virtual users. I was wondering if anyone had an example of knowledge on how to add another "readonly" user. I don't want to enable anon access. The issue I have is that the tutorial (from the wiki) uses the s

Re: [CentOS] vsftpd and SElinux

2008-12-10 Thread Dirk H. Schulz
Thanks, Filipe, that has lead me to exactly what I was looking for. Dirk --On 9. Dezember 2008 17:18:30 -0500 Filipe Brandenburger <[EMAIL PROTECTED]> wrote: > Hi, > > On Tue, Dec 9, 2008 at 15:02, Dirk H. Schulz <[EMAIL PROTECTED]> > wrote: >> I have configured vsftpd with virtual users for w

Re: [CentOS] vsftpd and SElinux

2008-12-09 Thread Filipe Brandenburger
Hi, On Tue, Dec 9, 2008 at 15:02, Dirk H. Schulz <[EMAIL PROTECTED]> wrote: > I have configured vsftpd with virtual users for webserver users (that > means, a virtual users chrooted home is the document root of a virtual host > in apache). That works fine so far - as long as SElinux ist not enforc

[CentOS] vsftpd and SElinux

2008-12-09 Thread Dirk H. Schulz
Hi folks, I have configured vsftpd with virtual users for webserver users (that means, a virtual users chrooted home is the document root of a virtual host in apache). That works fine so far - as long as SElinux ist not enforcing. I have tried to audit2allow out the problem, but did not succeed

RE: [CentOS] vsftpd

2008-10-07 Thread Bob Hoffman
> I'm using vsftpd as FTP server, and I'd like to chroot my FTP users > to their home dir. How can I do it? i.e. "jailing" > them in their home dir... > at the moment I have the following issues the user when they login to > ftp server they go to the main directory /var/ftp/ > Here is what I

[CentOS] vsftpd

2008-10-06 Thread Mad Unix
Hi ALL I'm using vsftpd as FTP server, and I'd like to chroot my FTP users to their home dir. How can I do it? i.e. "jailing" them in their home dir... at the moment I have the following issues the user when they login to ftp server they go to the main directory /var/ftp/ /etc/passwd ... sdc:x:5

Re: [CentOS] vsftpd and active mode connections causes FTP session to hang

2008-06-06 Thread Timothy Selivanow
On Thu, 2008-06-05 at 20:04 -0700, John R Pierce wrote: > Filipe Brandenburger wrote: > > On Thu, Jun 5, 2008 at 2:05 PM, Timothy Selivanow > > <[EMAIL PROTECTED]> wrote: > > > >> things like 'put' and 'get', etc.), the connection hangs. If you wait a > >> bit it returns with a "425 Failed to e

Re: [CentOS] vsftpd and active mode connections causes FTP session to hang

2008-06-05 Thread John R Pierce
Filipe Brandenburger wrote: On Thu, Jun 5, 2008 at 2:05 PM, Timothy Selivanow <[EMAIL PROTECTED]> wrote: things like 'put' and 'get', etc.), the connection hangs. If you wait a bit it returns with a "425 Failed to establish connection". I've tried Is the FTP client behind NAT? If it

Re: [CentOS] vsftpd and active mode connections causes FTP session to hang

2008-06-05 Thread Filipe Brandenburger
On Thu, Jun 5, 2008 at 2:05 PM, Timothy Selivanow <[EMAIL PROTECTED]> wrote: > things like 'put' and 'get', etc.), the connection hangs. If you wait a > bit it returns with a "425 Failed to establish connection". I've tried Is the FTP client behind NAT? If it is then active FTP won't work, since

Re: [CentOS] vsftpd and active mode connections causes FTP session to hang

2008-06-05 Thread Timothy Selivanow
On Thu, 2008-06-05 at 14:23 -0400, Ignacio Vazquez-Abrams wrote: > On Thu, 2008-06-05 at 11:05 -0700, Timothy Selivanow wrote: > > Any ideas? > > Did you open both ftp and ftp-data ports? Yes. On some of the hosts, my workstation is just explicitly allowed through also (I've also tried turning

Re: [CentOS] vsftpd and active mode connections causes FTP session to hang

2008-06-05 Thread Ignacio Vazquez-Abrams
On Thu, 2008-06-05 at 11:05 -0700, Timothy Selivanow wrote: > Any ideas? Did you open both ftp and ftp-data ports? -- Ignacio Vazquez-Abrams <[EMAIL PROTECTED]> PLEASE don't CC me; I'm already subscribed signature.asc Description: This is a digitally signed message part __

[CentOS] vsftpd and active mode connections causes FTP session to hang

2008-06-05 Thread Timothy Selivanow
I've encountered an odd error state that I haven't been able to resolve yet. I have a customer that, for what ever reason, wants to use active mode occasionally for FTP xfers. What they have noticed, is that after you switch to active, and issue a command (they do 'ls', I've done other things lik

[CentOS] VSFTPD with LDAP

2008-05-07 Thread Jake
It appears as I have VSFTPD allowing access authenticating to my LDAP server correctly. I did this by configuring my server to authenticate to my LDAP server from the GUI using System -> Administration -> Authentication. However now when I look at /var/log/secure it says authentication failure.

Re: [CentOS] Vsftpd problem

2007-06-28 Thread Tony Molloy
On Thursday 28 June 2007 10:18, Feizhou wrote: > Tony Molloy wrote: > > On Thursday 28 June 2007 08:58, Feizhou wrote: > >>> That's probably it. The SELinux problem strikes again. > >> > >> If you hate SELinux that much, just turn it off. > > > > I don't "hate" it. I just forget that it causes prob

  1   2   >