How to get vsftpd working

[Paolo Galtieri]

I've been trying to get vsftpd working but have had no luck so far.  This is
my config:

anonymous_enable=NO
local_enable=YES
write_enable=YES
local_umask=022
dirmessage_enable=YES
xferlog_enable=YES
connect_from_port_20=YES
xferlog_file=/var/log/vsftpd.log
xferlog_std_format=YES
ascii_upload_enable=YES
ascii_download_enable=YES
ftpd_banner=Welcome to Darkstar FTP service.
listen=YES

pam_service_name=vsftpd
userlist_enable=YES
tcp_wrappers=YES
pasv_max_port=1024
no_anon_password=YES

I am able to connect from my client system to the server.  I login as user
pgaltieri, am prompted for password, and when I enter it I am logged in.
However, once this happens I can't do anything.  If I try to put a file I
get:

ftp> put SPAM
local: SPAM remote: SPAM
227 Entering Passive Mode (10,0,0,70,31,17).
553 Could not create file.

If I try to list the directory:

ftp> dir
227 Entering Passive Mode (10,0,0,70,211,221).
150 Here comes the directory listing.
226 Transfer done (but failed to open directory).
ftp>

The directory ownership on the server is:

[pgaltieri@darkstar ~]$ /bin/ls -ld /home/pgaltieri
drwxr-xr-x. 38 pgaltieri pgaltieri 4096 2009-07-16 10:40 /home/pgaltieri

I changed this from the default 700 wondering if this might be the cause but
it made no difference.

I'm sure I'm doing something stupid, but I don't remember it being this hard
to set up.

I'm also logged in as the same user on the client system.  The directory
permissions on the client are 700

[pgaltieri@peglaptop10 ~]$ /bin/ls -ld ~pgaltieri
drwx------. 62 pgaltieri pgaltieri 4096 2009-07-16 11:34 /home/pgaltieri

I tried it with 755 but it still fails.

I would appreciate any help from someone who can tell me what I'm missing.
It seems to be a permissions issue on the server, but I don't know what it
could be.  I'm not getting any selinux alerts.

Thanks
Paolo

[Tony Nelson]

On 09-07-16 18:59:02, Ed Landaveri wrote:
 ...
>  The reason your directory listing fails is because of iptables.
>  Remember vsftp as any ftp server uses incoming port 21 connections 
>  but not well-known ports outgoing connections. Google and you'll find 
>  the exact configuration. 
He's using PASV mode, so only one port.  The messages clearly indicate 
a problem of some sort on the server.  Checking the logs is next.

 ...
>  > -----Original Message-----
>  > From: pemboa(a)gmail.com
>  > Sent: Thu, 16 Jul 2009 17:23:01 -0500
>  > To: fedora-list(a)redhat.com
>  > Subject: Re: How to get vsftpd working
>  > 
>  > On Thu, Jul 16, 2009 at 1:38 PM, Paolo Galtieri
>  > <pgaltieri(a)gmail.com&gt; wrote: 
 ...
>  >> If I try to put a file I get:
>  >> 
>  >> ftp> put SPAM
>  >> local: SPAM remote: SPAM
>  >> 227 Entering Passive Mode (10,0,0,70,31,17).
>  >> 553 Could not create file.
>  >> 
>  >> If I try to list the directory:
>  >> 
>  >> ftp> dir
>  >> 227 Entering Passive Mode (10,0,0,70,211,221).
>  >> 150 Here comes the directory listing.
>  >> 226 Transfer done (but failed to open directory).
>  >> ftp> 
-- 
____________________________________________________________________
TonyN.:'                       <mailto:[e-mail]>
      '                              <http://www.georgeanelson.com/>

[Aldo Foot]

On Thu, Jul 16, 2009 at 4:48 PM, Arthur Pemberton<pemboa(a)gmail.com> wrote:
>  On Thu, Jul 16, 2009 at 5:59 PM, Ed
> Landaveri<landaveri(a)inbox.com> wrote:
> > I would advise you NOT to allow WRITE_ENABLE. If your clients are other *.nix clients
> you only need scp/sftp or psftp on Windows clients. If you have MAC clients they also can
> use scp. These clients run over ssh that come stardard on Fedora/CentOS/Red Hat boxes. If
> you have Debian you install the ssh server and this will put the secure copy/ftp clients
> too. This way you just allow anonymous access and if your users want to upload anything to
> your server they will use a secure connection to their home directories. Good for loggin
> purposes too!
> >
> > The reason your directory listing fails is because of iptables. Remember vsftp as any
> ftp server uses incoming port 21 connections but not well-known ports outgoing
> connections. Google and you'll find the exact configuration.
>
>  If it is an iptables/firewall proble, system-config-firewall or maybe
>  system-config-securitylevel can be used to fix it 
_____

Keep in mind that system-config-firewall opens a port in a general
sense and offers
no granularity to specify only this or that IP.
Is there a system-config-securitylevel package for F11?

~af

[Arthur Pemberton]

On Thu, Jul 16, 2009 at 5:59 PM, Ed Landaveri<landaveri(a)inbox.com> wrote:
>  I would advise you NOT to allow WRITE_ENABLE. If your clients are
> other *.nix clients you only need scp/sftp or psftp on Windows clients. If you have MAC
> clients they also can use scp. These clients run over ssh that come stardard on
> Fedora/CentOS/Red Hat boxes. If you have Debian you install the ssh server and this will
> put the secure copy/ftp clients too. This way you just allow anonymous access and if your
> users want to upload anything to your server they will use a secure connection to their
> home directories. Good for loggin purposes too!
>
>  The reason your directory listing fails is because of iptables. Remember vsftp as any ftp
> server uses incoming port 21 connections but not well-known ports outgoing connections.
> Google and you'll find the exact configuration. 
If it is an iptables/firewall proble, system-config-firewall or maybe
system-config-securitylevel can be used to fix it

-- 
Fedora 10
(www.pembo13.com)

[Ed Landaveri]

I would advise you NOT to allow WRITE_ENABLE. If your clients are other *.nix clients you
only need scp/sftp or psftp on Windows clients. If you have MAC clients they also can use
scp. These clients run over ssh that come stardard on Fedora/CentOS/Red Hat boxes. If you
have Debian you install the ssh server and this will put the secure copy/ftp clients too.
This way you just allow anonymous access and if your users want to upload anything to your
server they will use a secure connection to their home directories. Good for loggin
purposes too!

The reason your directory listing fails is because of iptables. Remember vsftp as any ftp
server uses incoming port 21 connections but not well-known ports outgoing connections.
Google and you'll find the exact configuration.


Regards

+-+-+-+-+-+-+-+ +-+-+-+-+-+-+-+-+-+
|E|d|u|a|r|d|o| |L|a|n|d|a|v|e|r|i|
+-+-+-+-+-+-+-+ +-+-+-+-+-+-+-+-+-+

+-+-+-+-+-+-+-+-+-+ +-+-+-+-+ +-+-+-+-+-+-+
|G|N|U|-|L|i|n|u|x| |U|s|e|r| |4|3|3|5|1|2|
+-+-+-+-+-+-+-+-+-+ +-+-+-+-+ +-+-+-+-+-+-+


>  -----Original Message-----
>  From: pemboa(a)gmail.com
>  Sent: Thu, 16 Jul 2009 17:23:01 -0500
>  To: fedora-list(a)redhat.com
>  Subject: Re: How to get vsftpd working
>  
>  On Thu, Jul 16, 2009 at 1:38 PM, Paolo Galtieri<pgaltieri(a)gmail.com>
>  wrote:
> > I've been trying to get vsftpd working but have had no luck so far.
> > This is
> > my config:
> > 
> > anonymous_enable=NO
> > local_enable=YES
> > write_enable=YES
> > local_umask=022
> > dirmessage_enable=YES
> > xferlog_enable=YES
> > connect_from_port_20=YES
> > xferlog_file=/var/log/vsftpd.log
> > xferlog_std_format=YES
> > ascii_upload_enable=YES
> > ascii_download_enable=YES
> > ftpd_banner=Welcome to Darkstar FTP service.
> > listen=YES
> > 
> > pam_service_name=vsftpd
> > userlist_enable=YES
> > tcp_wrappers=YES
> > pasv_max_port=1024
> > no_anon_password=YES
> > 
> > I am able to connect from my client system to the server.  I login as
> > user
> > pgaltieri, am prompted for password, and when I enter it I am logged in.
> > However, once this happens I can't do anything.  If I try to put a file
> > I
> > get:
> > 
> > ftp> put SPAM
> > local: SPAM remote: SPAM
> > 227 Entering Passive Mode (10,0,0,70,31,17).
> > 553 Could not create file.
> > 
> > If I try to list the directory:
> > 
> > ftp> dir
> > 227 Entering Passive Mode (10,0,0,70,211,221).
> > 150 Here comes the directory listing.
> > 226 Transfer done (but failed to open directory).
> > ftp>
> > 
> > The directory ownership on the server is:
> > 
> > [pgaltieri@darkstar ~]$ /bin/ls -ld /home/pgaltieri
> > drwxr-xr-x. 38 pgaltieri pgaltieri 4096 2009-07-16 10:40 /home/pgaltieri
> > 
> > I changed this from the default 700 wondering if this might be the cause
> > but
> > it made no difference.
> > 
> > I'm sure I'm doing something stupid, but I don't remember it being this
> > hard
> > to set up.
> > 
> > I'm also logged in as the same user on the client system.  The directory
> > permissions on the client are 700
> > 
> > [pgaltieri@peglaptop10 ~]$ /bin/ls -ld ~pgaltieri
> > drwx------. 62 pgaltieri pgaltieri 4096 2009-07-16 11:34 /home/pgaltieri
> > 
> > I tried it with 755 but it still fails.
> > 
> > I would appreciate any help from someone who can tell me what I'm
> > missing.
> > It seems to be a permissions issue on the server, but I don't know what
> > it
> > could be.  I'm not getting any selinux alerts.
> > 
> > Thanks
> > Paolo
>  
>  
>  Check your logs
>  
>  /var/log/messages
>  /var/log/secure
>  /var/log/vsftpd.log
>  
>  
>  
>  --
>  Fedora 10
>  (www.pembo13.com)
>  
>  --
>  fedora-list mailing list
>  fedora-list(a)redhat.com
>  To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
>  Guidelines:
>  http://fedoraproject.org/wiki/Communicate/MailingListGuidelines

[Arthur Pemberton]

On Thu, Jul 16, 2009 at 1:38 PM, Paolo Galtieri<pgaltieri(a)gmail.com> wrote:
>  I've been trying to get vsftpd working but have had no luck so
> far.  This is
>  my config:
>
>  anonymous_enable=NO
>  local_enable=YES
>  write_enable=YES
>  local_umask=022
>  dirmessage_enable=YES
>  xferlog_enable=YES
>  connect_from_port_20=YES
>  xferlog_file=/var/log/vsftpd.log
>  xferlog_std_format=YES
>  ascii_upload_enable=YES
>  ascii_download_enable=YES
>  ftpd_banner=Welcome to Darkstar FTP service.
>  listen=YES
>
>  pam_service_name=vsftpd
>  userlist_enable=YES
>  tcp_wrappers=YES
>  pasv_max_port=1024
>  no_anon_password=YES
>
>  I am able to connect from my client system to the server.  I login as user
>  pgaltieri, am prompted for password, and when I enter it I am logged in.
>  However, once this happens I can't do anything.  If I try to put a file I
>  get:
>
>  ftp> put SPAM
>  local: SPAM remote: SPAM
>  227 Entering Passive Mode (10,0,0,70,31,17).
>  553 Could not create file.
>
>  If I try to list the directory:
>
>  ftp> dir
>  227 Entering Passive Mode (10,0,0,70,211,221).
>  150 Here comes the directory listing.
>  226 Transfer done (but failed to open directory).
>  ftp>
>
>  The directory ownership on the server is:
>
>  [pgaltieri@darkstar ~]$ /bin/ls -ld /home/pgaltieri
>  drwxr-xr-x. 38 pgaltieri pgaltieri 4096 2009-07-16 10:40 /home/pgaltieri
>
>  I changed this from the default 700 wondering if this might be the cause but
>  it made no difference.
>
>  I'm sure I'm doing something stupid, but I don't remember it being this hard
>  to set up.
>
>  I'm also logged in as the same user on the client system.  The directory
>  permissions on the client are 700
>
>  [pgaltieri@peglaptop10 ~]$ /bin/ls -ld ~pgaltieri
>  drwx------. 62 pgaltieri pgaltieri 4096 2009-07-16 11:34 /home/pgaltieri
>
>  I tried it with 755 but it still fails.
>
>  I would appreciate any help from someone who can tell me what I'm missing.
>  It seems to be a permissions issue on the server, but I don't know what it
>  could be.  I'm not getting any selinux alerts.
>
>  Thanks
>  Paolo 

Check your logs

/var/log/messages
/var/log/secure
/var/log/vsftpd.log



-- 
Fedora 10
(www.pembo13.com)