CentOS 5 Server :: Can't Set Vsftpd With SElinux Properly / Sort It?
Apr 8, 2010
I'm able to connect to ftp as a virtual user. It was also difficult as nowhere mentioned, that it should be done with SSL. Anyway I found the answer and got connection. But now I can't connect to ftp server as system user. It gives me "530 Permission denied", or if I delete the user from the file denied_users, - "530 Login incorrect".
1. Still I can't understand, how I can log in to FTP server with a system user.Also some other questions regarding this matter:
2. My httpd server Apache has a virtual hosts located in "/home" directory.The scripts create users in "/var/ftp virtual_users". Will it cause any problem if I will change them to "/home"? All I need to do with this is ability to have several virtual hosts in one server with separate access to each of them via FTP. And 1 account with access to all files in "/home".
3. In my ftp client I can see the owner of virtual host "ftp" instead of username.
View 7 Replies
ADVERTISEMENT
May 11, 2010
I am trying to use CentOS 5.4 to set up a secure laptop, largely because of it's SELinux functionality. Unfortunately I couldn't get wireless to work properly using the default NetworkManager so I installed wicd. Initially it buggered up my whole installation but after relabelling files using SEL I can now use my system again. but.. I can't use it with SELinux enabled, as it denies the required accesses for wicd to work. I also get similar SELinux denials for wpa_supplicant. A couple of snippets from /var/log/audit/audit.log -
[Code]....
View 4 Replies
View Related
Sep 13, 2010
What are the SElinux security context type & booleans in FTP/vsftpd
View 3 Replies
View Related
Jun 8, 2009
I'm using CentOS 5.3, and I want to allow my samba server from selinux. I disabled my selinux and it works fine, but I want to keep my seline firewall on and want to allow other workstation to access my samba server.
View 8 Replies
View Related
Sep 24, 2010
I always thought that whenever /usr/sbin/setsebool was used, it would write either a "0" or a "1" into the corresponding boolean file. All SELinux boolean files are in /selinux/booleans but If I check, for example, this boolean ...
$ sudo /usr/sbin/getsebool ftp_home_dir
ftp_home_dir --> on
It returns a positive, but if I do
$ sudo less /selinux/booleans/ftp_home_dir
I get ... read error (Press Return)
Furthermore, if I list the boolean file itself, it shows it to be empty
$ sudo ls -l /selinux/booleans/ftp_home_dir
-rw-r--r-- 1 root root 0 Aug 9 11:09 /selinux/booleans/ftp_home_dir
Where is SELinux storing the booleans then?
This is on CentOS 5.4
View 3 Replies
View Related
Aug 31, 2009
OS: CentOS 5.3
vsftpd ver: vsftpd-2.0.5-12.el5_3.1
I installed vsftpd server in one of my servers using "yum install vsftpd" command. NFS server is running in the other server and mounted as "/data" in this FTP server. root in FTP server has also root authority in NFS server. All the files and sub-folders under "/data" in FTP server have 755 or 766 mode. Even I modified vsftpd setting to allow root login.
When I login as root to FTP server with FileZilla client, I can see all the file list in root home directory and move to /data directory. I can download any file in a local HDD but I can not download any file in /data directory.
View 1 Replies
View Related
Jan 11, 2009
I open "man vsftpd.conf", it says syslog_enable If enabled, then any log output which would have gone o /var/log/vsftpd.log goes to the system log instead. Logging is done under the FTPD facility. Default: NO So I add "syslog_enable=YES" to the /etc/vsftpd.conf, and add "ftpd.* /var/log/ftplog" into /etc/syslog.conf. But there is no log infomation in the ftplog file.
View 7 Replies
View Related
Dec 20, 2009
I'm still learning my way around CentOS and linux in general... Using CentOS 5.4
BUT, I used the scripts from HowTo/Chroot Vsftpd and it did not work with the non-TLS script config, but the with TSL worked great. I wasn't sure where to put the vsftpd_virtualuser_config.tpl file but I copied it over when the script failed to find it... to where it was looking.
So I think it's working but my question is, TLS doesn't use port 21 but the script defaults to that port. I'm using FileZilla from an XP machine at work and I'm forwarding all the ports given in the HowTo. So I'm forcing the client to use TLS on port 21 but it hangs on the connection. If I use non TLS I get in but it tells me it requires TSL. I've had no luck with vsftpd in the past and this is my next attempt.
Quote:anon_world_readable_only=NO
anonymous_enable=NO
chroot_local_user=YES
guest_enable=NO
[Code]....
View 1 Replies
View Related
May 8, 2009
I don't think it has anything to do with the config file.More to do with SElinux. I need to know how to configure SElinux so I can see my samba share when SELinuxis on. When I setenforce 0 I can seen all the files and folders set it to setenforce 1 cannot see anything.Here is the output when I ran [root@fileserver /]# getsebool -a | grep smballow_smbd_anon_write --> onsmbd_disable_trans --> onThese two options were off I tried turning them on.This is another one of the commands I tried running. I did change a few options but I am not sure which I do need to change. I am running a stand alone server so I don't need the DC option.
[root@fileserver /]# getsebool -a | grep samba
samba_domain_controller --> off
samba_enable_home_dirs --> off
[code]....
View 2 Replies
View Related
Jul 14, 2010
I've only recently encountered this problem with vsftpd when I was creating new ftp accounts. I keep on getting:
550 Access Denied.
on every action I try to do on ftp, no matter what. I've been trying to solve this myself however my attempts have been futile.
The permissions, and ownership have been checked and rechecked tens of times now, so thats not the issue. I've reinstalled the OS of my server twice now, and the problem is still persisting. Heres my config file, this isnt for anon by the way.
Code:
# Example config file /etc/vsftpd/vsftpd.conf
#
# The default compiled in settings are fairly paranoid. This sample file
# loosens things up a bit, to make the ftp daemon more usable.
# Please see vsftpd.conf.5 for all compiled in defaults.
#
[Code].....
View 4 Replies
View Related
Jan 19, 2010
I already have this setup working in a debian server but I would like to setup the same in CentOS 5.3. I just copied all the configuration files to the CentOS server but I'm getting the following errors in messages:
vsftpd: nss_ldap: reconnecting to LDAP server (sleeping 64 seconds)...
vsftpd: nss_ldap: reconnecting to LDAP server (sleeping 64 seconds)...
crond[24483]: nss_ldap: reconnecting to LDAP server (sleeping 4 seconds)...
crond[24483]: nss_ldap: reconnecting to LDAP server (sleeping 8 seconds)...
crond[24483]: nss_ldap: reconnecting to LDAP server (sleeping 16 seconds)...
crond[24483]: nss_ldap: reconnecting to LDAP server (sleeping 32 seconds)...
[Code]...
View 2 Replies
View Related
May 20, 2010
I set up my vsftpd server, but when using "sftp servername" it's not using vsftpd but another (what seems like) built-in sftp server. Even when I stop the vsftpd service I am still able to get a prompt to log in. I haven't installed any other ftp servers.
View 2 Replies
View Related
Nov 5, 2010
I've installed a fresh centos5 box and installed vsftpd however my first test user does not have permissions to his own home directory.
Quote:Status:Connecting to x.x.x.x:21...
Status:Connection established, waiting for welcome message...
Response:220 Welcome
Command:USER xxxxxxx
[Code].....
View 3 Replies
View Related
Sep 16, 2010
I'm having difficulties with uploading files to a CentOS-server with vsftpd. I have the exact same configuration on a Fedora10 and there I have no problems...
[Code]...
View 2 Replies
View Related
Sep 26, 2010
Trying to set up VSFTPD on the CentOS 5 box at work, which is an internal web development server. I'm leaving soon, and all knowledge of or desire to learn SSH is going with me so the other employees will need to be able to access the web root using FTP clients.
Essentially there is no need for special user accounts or privileges, it's an internal server in a tiny company. I've got the LocalRoot set to /var/www/ which I can log in to and read all files via FTP, however despite setting everything to 777 in /var/www/ and below, I still can't get any write privileges on the FTP server.
View 3 Replies
View Related
Jun 2, 2009
I followed instructions from here: [url]
Everything seems to be ok but if I try to login it says following:
I have tried with numerous clients and accounts but still nothing, I cant get past the login. What may be wrong?
Here is the log from account creation, could the last line be causing the problems?
I had some hassle with the last two iptables lines but once I took away RH-Firewall-1 from those lines iptables gave no error anymore.
I changed this: -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 21 -j ACCEPT
To this: -A INPUT -m state --state NEW -m tcp -p tcp --dport 21 -j ACCEPT
View 4 Replies
View Related
Aug 14, 2009
I am attempting to connect to VSFTPD via Filezilla from a windows machine, but regardless of which user name I use I get a "530 Login incorrect" error. I have tried turning off the firewalls on both the CentOS and Windows side of things with no result. I disabled the SSL/TLS commands in the config file, also with no change. I tried a couple of different FTP clients, but got similar results regardless of which client I used. I have been going over man pages and documentation for a couple of days now, but cannot come up with an answer. I suspect it lies in my configuration, but I got the same results when I reverted my config file back to the original. what else I can do? One other note is that I am attempting to connect via a LAN, at this point I don't care if it works across the WAN as I only intend to use it to upload files to my web server.
[Code]....
View 5 Replies
View Related
Sep 14, 2009
I am running FTP server using vsftpd 2.0.5-12 on Centos 5.3 64bit with default settings, annonymous access enabled. Each night new files are created and moved into a FTP subdirectory (/var/ftp/spectra) by a script. The files are owned by a local user/group, not root, and the same holds for the /var/ftp/spectra subdirectory. The new files are not visible via FTP. Only visible are files that were created the same day when I made the directory /var/ftp/spectra. Also files that are created "in place", e.g. by vi, are visible until I change their owner/group. This is the situation when vsftpd is runned as a system service (/etc/init.d/vsftpd start).
When I start the vsftpd directly using the command /usr/sbin/vsftpd (both without or with the configuration file specified), all files are visible and normally accessible via FTP.
View 4 Replies
View Related
Oct 19, 2009
I have never had the packaged vsftpd start with the ssl_enable option set to YES. The mysql on those servers works just fine with SSL enabled. After reading there seems to be a different package available on rh5 repo. This server shows up to date with 2.0.5-12.el5_3.1. The rh5 list shows 2.0.5-16_el5 per this:[URL].. My question is, is there a set lead time till adoption of current RH packages or is just random? I have to have SSL_ftp running and didn't want to step out of the repo lists if possible.
View 4 Replies
View Related
Mar 18, 2010
I'm trying to configure vsftpd to just allow my local users to login and be confined to their home directory (and its sub-directories).
Here is my vsftpd.conf:
listen=YES
anonymous_enable=NO
local_enable=YES
[Code].....
I've tried multiple configurations to no avail. I always end up with this same end result.
View 3 Replies
View Related
May 25, 2011
How do I turn winbind authentication off or vsftpd. I keep getting these error messages in the /var/log/ secure:vsftpd: pam_winbind(vsftpd:auth): request failed: No such user, PAM error was User not known to the underlying authentication module (10), NT error was NT_STATUS_NO_SUCH_USER.I already tried remarking out different things in the config files. Is it safe to remark out the winbind stuff in /etc/pam.d/system-auth if we are using the smbclient to connect to a Windows share?Why would you want to to use AD to authenticate users for something simple like FTP is beyond me.I merely want it to authenticate against local system users.
View 3 Replies
View Related
Aug 10, 2011
Using THIS I was able to get virtual users working via standard ftp. After wrestling with selinux and such I'm able to log in as a user defined in the virtual-users file.
At the bottom is the vsftpd.conf. I can start the server no problem. I've been making edits to it so I'm not sure what's right/wrong at this point in it. I have a snapshot I keep reverting to where ftp works with virtual users and then I start monkeying with it again.
First problem I have is I'm not exactly sure how to test it. If I use WinSCP, I try SFTP and in the vsftpd.log I see:
Quote:Wed Aug 10 12:47:50 2011 [pid 3667] CONNECT: Client "192.168.xxx.xxx"
Wed Aug 10 12:47:50 2011 [pid 3667] FTP response: Client "192.168.xxx.xxx", "220 (vsFTPd 2.0.5)"
[Code].....
View 1 Replies
View Related
Feb 10, 2011
Any clue? I'm using the same key for root login and it works fine (also works fine for SFTP but i hate using that cause its extremely slow)
View 2 Replies
View Related
Jun 13, 2009
I am trying to wade through the semanage jungle to get permissions for a tftp client. I followed the HowTos [URL] but I get the following at the client:
tftp> status
Connected to 192.168.1.101.
Mode: netascii Verbose: off Tracing: off
Rexmt-interval: 5 seconds, Max-timeout: 25 seconds
tftp> get hello.o4
tftp: hello.o4: Permission denied
I finally figured out that the firewall directives shown at the end of the HowTo refer to semanage although the options are stated incorrectly according to the man page for semanage. I did insure that the file hello.o4 in /tftpboot has read permission for everybody.
View 1 Replies
View Related
May 4, 2010
I am attempting to configure vsftpd to allow anonymous users to PUT files into a shared incoming directory. This would be like a dropbox for my customers. Ideally, the incoming directory's contents would not be viewable by the users.
I believe that refused connection is due to the PAM configuration for vsftpd.
May 4 08:03:16 WSVM-S1-1 sshd[1512]: Invalid user anonymous from xxx.xxx.xxx.xxx
May 4 08:03:16 WSVM-S1-1 sshd[1513]: input_userauth_request: invalid user anonymous
May 4 08:03:16 WSVM-S1-1 sshd[1512]: pam_unix(sshd:auth): check pass; user unknown
[Code].....
View 3 Replies
View Related
Sep 20, 2010
I have a centos server installation running, and have installed and configured vsftpd.
FileZilla works great. I am able to connect and transfer files both ways. I used this just for testing purposes.
What I need to do is get Fling File Transfer working. I can connect to vsftpd with Fling, but that is as far as it goes.Sep 20 11:18:44 ftp vsftpd[28286]: warning: can't get client address: Socket operation on non-socketSep 20 11:31:03 ftp avahi-daemon[2240]:
Fling's logfile shows this:
11:25:57 Connect: 192.168.40.41
11:25:57 Connect: 192.168.40.41 Ok
11:25:57 Upload: C:UsersPublicDocumentsFling 1
[code]....
View 2 Replies
View Related
Aug 19, 2009
I've setup vsftpd correctly and it's running fine with local users (in the same LAN). However, when remote users wanna login to the server, it takes more than 1 minute to get in. Users do can login from remote. It just took too long. (It prompted for the username and password very fast.) Since the server is behind a router, I did configure the port forwarding for TCP 20-21. The centos version is 5.3. The vsftpd is v2.0.5.
View 6 Replies
View Related
Dec 31, 2009
I receive the message "SELinux is preventing /usr/sbin/vsftpd "net_raw" access" many times. Found this bug at redhat but really do not understand what i should do about it ((( Kindly let me know how to change this to normal. Shut down Selinux is not the way out.
View 14 Replies
View Related
Oct 28, 2009
I've got a new server machine: Fujitsu-Siemens PRIMERGY TX150 S6.
I've tired to install CentOS 4.4 linux from DVD. This DVD is OK, because I installed from it a couple of days ago. Installation process starts but after some steps it gives me something like this code...
View 2 Replies
View Related
May 23, 2011
I am using Postfix on CentOS to send mail through a relayhost. The mail sends fine, but on certain clients such as the mail client on the iPhone or Windows Live Mail, the message is received with '(No Sender)' in the sender field. The Apple Mail client on the iMac works just fine.
Here is the PHP code I am using to send the mail code...
Wondering if there is a configuration setting in /etc/postfix/main.cf I can use to fix this problem. I have scoured the help files but have come up empty.
View 5 Replies
View Related
