PDA

Click to See Complete Forum and Search --> : here's my vsftpd.conf, but why only anonymous can connect, and local users can't.

roadorange
08-09-2003, 08:36 PM
################################################## #
# FTP Configuration File Setup :'D #
################################################## #

#Step 2) Set up your vsftpd configuration file.

#An example file is supplied. Install it like this:
#cp vsftpd.conf /etc

#Let's example the contents of the file:

# Access rights
anonymous_enable=NO
local_enable=YES
write_enable=NO
anon_upload_enable=NO
anon_mkdir_write_enable=NO
anon_other_write_enable=NO
local_umask=022
#chroot_list_enable=YES
# (default follows)
#chroot_list_file=/etc/vsftpd.chroot_list


# This makes sure the FTP server is in anonymous-only mode and that all write
# and upload permissions are disabled. Note that most of these settings are
# local_enable is to allow local users to log in.
# write_enable is to enable any form of FTP write command.
# the same as the default values anyway - but where security # is concerned, it is good to be clear.
# Default umask for local users is 077. You may wish to change this to 022,
# if your users expect that (022 is used by most other ftpd's)
# chroot_list_enable,You may specify an explicit list of local users to chroot() to their home directory. If chroot_local_user is YES, then
# this list becomes a list of users to NOT chroot().

# Security
#anon_world_readable_only=YES
connect_from_port_20=YES
hide_ids=YES
pasv_min_port=50000
pasv_max_port=60000
#chown_uploads=YES
#chown_username=whoever
#nopriv_user=ftpsecure
#deny_email_enable=YES
# (default follows)
#banned_email_file=/etc/vsftpd.banned_emails
ls_recurse_enable=NO



here i only list few of them ,which are most importance setting. what do you think?? my local users can't connect to my ftp server, and only anonymous can connect.. anyone has idea how to fix it? i want to use local user.
and i dont' want anonymous connect to my ftp server.
this ftp server is working with xinetd
here the output i got:

Connected to 192.168.0.1 (192.168.0.1).
220 (vsFTPd 1.1.3)
Name (192.168.0.1:root): xxxxx
530 This FTP server is anonymous only.
Login failed.
ftp>
ven0m
08-10-2003, 05:43 AM
#chroot_list_enable=YES
# (default follows)
#chroot_list_file=/etc/vsftpd.chroot_list
if you want local users to login, why have you commented this out.

Also do not login as root as ftp is unencrypted.
je_fro
08-10-2003, 05:52 AM
Through inetd? xinetd? Have you restarted since changing the conf file?
roadorange
08-10-2003, 02:21 PM
Originally posted by ven0m
if you want local users to login, why have you commented this out.

Also do not login as root as ftp is unencrypted.
i didn't know what this mean before:
#chroot_list_enable=YES
# (default follows)
#chroot_list_file=/etc/vsftpd.chroot_list
oh... i didn't know that setting. hm... let me change it, if the file /etc/vsftpd.chroot_list is empty, mean all local user can login???
roadorange
08-10-2003, 02:22 PM
Originally posted by je_fro
Through inetd? xinetd? Have you restarted since changing the conf file?
i think through xinetd, i restart the whole computer, let me follow venom's direction to fix it.
ven0m
08-10-2003, 02:52 PM
Also are your user names in the file
/etc/vsftpd.user_list?
and you will want this option as well
userlist_deny=NO
roadorange
08-10-2003, 02:59 PM
Originally posted by ven0m
Also are your user names in the file
/etc/vsftpd.user_list?
and you will want this option as well
userlist_deny=NO
ya. i created this file manually before, and it's empty..
which conf file do i put "userlist_deny=NO " this optoin in???
ven0m
08-10-2003, 03:25 PM
Originally posted by roadorange
ya. i created this file manually before, and it's empty..
which conf file do i put "userlist_deny=NO " this optoin in???
1. put the user names that your allowing to use your ftp in etc/vsftpd.user_list
2. put userlist_deny=NO in your vsftpd.conf
you should have a section in your vsftpd.conf like this:
...
pam_service_name=vsftpd
userlist_enable=YES
userlist_deny=NO
...

BTW. do you have this config file /etc/vsftpd/vsftpd.conf
if so use this to make your changes, as /etc/vsftpd.conf on some distros gets over looked
je_fro
08-10-2003, 03:26 PM
Have a look at /etc/xinetd.conf and be sure you're allowing non-local connections.
roadorange
08-10-2003, 03:28 PM
thank you . you 2 are good. :'D
roadorange
08-10-2003, 10:53 PM
why i can't restart vsftpd without reboot the system. =.=
i type:
#service vsftpd restart

output:
[root@localhost etc]# service vsftpd restart
Shutting down vsftpd: [FAILED]
Starting vsftpd for vsftpd: [ OK ]
[root@localhost etc]#
roadorange
08-12-2003, 05:18 PM
my ftp server is fixed and work properly. thanks those ppl who reply my topic.