ispCP 1.0.0 RC6 und proftp - Printable Version +- ispCP - Board - Support (http://www.isp-control.net/forum) +-- Forum: ispCP Omega International Area (/forum-22.html) +--- Forum: German Corner (/forum-26.html) +--- Thread: ispCP 1.0.0 RC6 und proftp (/thread-3998.html) Pages: 1 2 |
ispCP 1.0.0 RC6 und proftp - neppumuck - 08-10-2008 07:04 AM Hallo zusammen, ich habe Ubuntu Server 7.10 (Gusty) mit ispCP 1.0.0 RC6 installiert. Habe dabei die Anleitung abgearbeitet. Jetzt viel mir auf, dass die von Benutzern angelegten FTP-Zugänge nicht funktionieren. In die Mysql Tabelle ftp_users wird er eingetragen. proftp.log meldet dazu: Aug 09 22:48:35 xxx.xxxx.org proftpd[4983] xxx.xxxx.org (::ffff:192.168.1.123[::ffff:192.168.1.123]): FTP session opened. Aug 09 22:48:35 xxx.xxxx.org proftpd[4983] xxx.xxxx.org (::ffff:192.168.1.123[::ffff:192.168.1.123]): mod_delay/0.5: delaying for 1 usecs Aug 09 22:48:35 xxx.xxxx.org proftpd[4983] xxx.xxxx.org (::ffff:192.168.1.123[::ffff:192.168.1.123]): no such user 'ftp@xxxxxxx.org.org' Aug 09 22:48:35 xxx.xxxx.org proftpd[4983] xxx.xxxx.org (::ffff:192.168.1.123[::ffff:192.168.1.123]): USER ftp@xxxxxxx.org.org: no such user found from ::ffff:192.168.1.123 [::ffff:192.168.1.123] to ::ffff:192.168.1.240:21 Aug 09 22:48:35 xxx.xxxx.org proftpd[4983] xxx.xxxx.org (::ffff:192.168.1.123[::ffff:192.168.1.123]): FTP session closed.3] xxx.xxxx.org (::ffff:192.168.1.123[::ffff:192.168.1.123]): FTP session closed. Hier die proftp.conf: # # /etc/proftpd/proftpd.conf -- This is a basic ProFTPD configuration file. # To really apply changes reload proftpd after modifications. # # Includes DSO modules Include /etc/proftpd/modules.conf # Set off to disable IPv6 support which is annoying on IPv4 only boxes. UseIPv6 on ServerName "Debian" ServerType standalone DeferWelcome off MultilineRFC2228 on DefaultServer on ShowSymlinks on TimeoutNoTransfer 600 TimeoutStalled 600 TimeoutIdle 1200 DisplayLogin welcome.msg DisplayFirstChdir .message ListOptions "-l" DenyFilter \*.*/ # Use this to jail all users in their homes # DefaultRoot ~ # Users require a valid shell listed in /etc/shells to login. # Use this directive to release that constrain. # RequireValidShell off # Port 21 is the standard FTP port. Port 21 # In some cases you have to specify passive ports range to by-pass # firewall limitations. Ephemeral ports can be used for that, but # feel free to use a more narrow range. # PassivePorts 49152 65534 # If your host was NATted, this option is useful in order to # allow passive tranfers to work. You have to use your public # address and opening the passive ports used on your firewall as well. # MasqueradeAddress 1.2.3.4 # To prevent DoS attacks, set the maximum number of child processes # to 30. If you need to allow more than 30 concurrent connections # at once, simply increase this value. Note that this ONLY works # in standalone mode, in inetd mode you should use an inetd server # that allows you to limit maximum number of processes per service # (such as xinetd) MaxInstances 30 # Set the user and group that the server normally runs at. User proftpd Group nogroup # Umask 022 is a good standard umask to prevent new files and dirs # (second parm) from being group and world writable. Umask 022 022 # Normally, we want files to be overwriteable. AllowOverwrite on # Uncomment this if you are using NIS or LDAP to retrieve passwords: # PersistentPasswd off # Be warned: use of this directive impacts CPU average load! # Uncomment this if you like to see progress and transfer rate with ftpwho # in downloads. That is not needed for uploads rates. # # UseSendFile off # Choose a SQL backend among MySQL or PostgreSQL. # Both modules are loaded in default configuration, so you have to specify the backend # or comment out the unused module in /etc/proftpd/modules.conf. # Use 'mysql' or 'postgres' as possible values. # #<IfModule mod_sql.c> # SQLBackend mysql #</IfModule> TransferLog /var/log/proftpd/xferlog SystemLog /var/log/proftpd/proftpd.log <IfModule mod_tls.c> TLSEngine off </IfModule> <IfModule mod_quota.c> QuotaEngine on </IfModule> <IfModule mod_ratio.c> Ratios on </IfModule> # Delay engine reduces impact of the so-called Timing Attack described in # http://security.lss.hr/index.php?page=details&ID=LSS-2004-10-02 # It is on by default. <IfModule mod_delay.c> DelayEngine on </IfModule> <IfModule mod_ctrls.c> ControlsEngine on ControlsMaxClients 2 ControlsLog /var/log/proftpd/controls.log ControlsInterval 5 ControlsSocket /var/run/proftpd/proftpd.sock </IfModule> <IfModule mod_ctrls_admin.c> AdminControlsEngine on </IfModule> # A basic anonymous configuration, no upload directories. # <Anonymous ~ftp> # User ftp # Group nogroup # # We want clients to be able to login with "anonymous" as well as "ftp" # UserAlias anonymous ftp # # Cosmetic changes, all files belongs to ftp user # DirFakeUser on ftp # DirFakeGroup on ftp # # RequireValidShell off # # # Limit the maximum number of anonymous logins # MaxClients 10 # # # We want 'welcome.msg' displayed at login, and '.message' displayed # # in each newly chdired directory. # DisplayLogin welcome.msg # DisplayFirstChdir .message # # # Limit WRITE everywhere in the anonymous chroot # <Directory *> # <Limit WRITE> # DenyAll # </Limit> # </Directory> # # # Uncomment this if you're brave. # # <Directory incoming> # # # Umask 022 is a good standard umask to prevent new files and dirs # # # (second parm) from being group and world writable. # # Umask 022 022 # # <Limit READ WRITE> # # DenyAll # # </Limit> # # <Limit STOR> # # AllowAll # # </Limit> # # </Directory> # # </Anonymous> Kann mir bitte jemand einen Rat geben? LG Alex RE: ispCP 1.0.0 RC6 und proftp - Zothos - 08-10-2008 07:11 PM bitte mal eine error log ohne xxxxx. RE: ispCP 1.0.0 RC6 und proftp - Dexus - 08-10-2008 07:19 PM ist es so gewollt? xxx.org.org? RE: ispCP 1.0.0 RC6 und proftp - fulltilt - 08-10-2008 08:47 PM Zothos Wrote:bitte mal eine error log ohne xxxxx. Genau das Problem hatte ich vor einiger Zeit auch, ich kann zwar wieder einloggen aber der Login per net2ftp dauert fast 60 sec. - ausloggen dauert auch ewig. Ich denke hier müsste dringend eine Anpassung im net2ftp (u. proftpd) erfolgen - das bekomme ich nach dem einloggen: Code: Ihr Auftrag wurde angehalten Ich habe das vorerst so lösen können: http://www.isp-control.net/forum/erledigt-proftpd-fehler-t-3895-2.html#pid33588 RE: ispCP 1.0.0 RC6 und proftp - neppumuck - 08-10-2008 09:34 PM Hallo nochmal, danke erst mal für die Antworten. Hier ist der Auszug aus der proftp.log: Aug 10 13:27:10 alx.zapto.org proftpd[5403] alx.zapto.org: ProFTPD 1.3.0 (stable) (built Fri Jun 15 12:52:16 GMT 2007) standalone mode STARTUP Aug 10 13:27:24 alx.zapto.org proftpd[5406] alx.zapto.org (::ffff:192.168.1.123[::ffff:192.168.1.123]): FTP session opened. Aug 10 13:27:24 alx.zapto.org proftpd[5406] alx.zapto.org (::ffff:192.168.1.123[::ffff:192.168.1.123]): no such user 'ftp@alexmueller.org' Aug 10 13:27:24 alx.zapto.org proftpd[5406] alx.zapto.org (::ffff:192.168.1.123[::ffff:192.168.1.123]): USER ftp@alexmueller.org: no such user found from ::ffff:192.168.1.123 [::ffff:192.168.1.123] to ::ffff:192.168.1.240:21 Aug 10 13:27:24 alx.zapto.org proftpd[5406] alx.zapto.org (::ffff:192.168.1.123[::ffff:192.168.1.123]): FTP session closed. Ich werde jetzt mal den Ansatz von fulltilt verfolgen und heute Abend berichten, wie es gelaufen ist. Danke schon mal vorab LG Alex Nachtrag: bekomme gerade die Meldung beim Start von Proftp: Fatal: unknown configuration directive 'SQLBackend' on line 168 of '/etc/proftpd/proftpd.conf' LG RE: ispCP 1.0.0 RC6 und proftp - neppumuck - 08-11-2008 06:21 AM Hallo nochmal, ich habe jetzt folgendes gemacht: beide confs proftpd und die in ispcp/proftpd oben in die erste zeile: AuthOrder mod_sql.c # ispCP SQL Managment AuthOrder mod_sql.c SQLBackend mysql SQLAuthTypes Crypt SQLAuthenticate on SQLConnectInfo ispcp@localhost vftp xxxxxxxxxxxxxxx SQLUserInfo ftp_users userid passwd uid gid homedir shell SQLGroupInfo ftp_group groupname gid members SQLMinID 2000 und: ach ja und in der modules.conf das postgres auskommentiert :-) dann habe ich folgenden Eintrag aktiviert, um die Fehlermeldung ( letzter Beitrag unten ) abzuschalten: #<IfModule mod_sql.c> SQLBackend mysql #</IfModule> also hier nocheinmal die beiden konfs: /etc/ispcp/proftpd: AuthOrder mod_sql.c # ispCP SQL Managment AuthOrder mod_sql.c SQLBackend mysql SQLAuthTypes Crypt SQLAuthenticate on SQLConnectInfo ispcp@localhost vftp passwort SQLUserInfo ftp_users userid passwd uid gid homedir shell SQLGroupInfo ftp_group groupname gid members SQLMinID 2000 # # ispCP ω (OMEGA) a Virtual Hosting Control System # # @copyright 2001-2006 by moleSoftware GmbH # @copyright 2006-2008 by ispCP | http://isp-control.net # @version SVN: $ID$ # @link http://isp-control.net # @author ispCP Team # # @license # This program is free software; you can redistribute it and/or modify it under # the terms of the MPL General Public License as published by the Free Software # Foundation; either version 1.1 of the License, or (at your option) any later # version. # You should have received a copy of the MPL Mozilla Public License along with # this program; if not, write to the Open Source Initiative (OSI) # http://opensource.org | osi@opensource.org # ################################################################################ # Includes DSO modules (this is mandatory in proftpd 1.3) #Include /etc/proftpd/modules.conf # Set off to disable IPv6 support which is annoying on IPv4 only boxes. UseIPv6 off ServerName "{HOST_NAME}" ServerType standalone DeferWelcome off MultilineRFC2228 on DefaultServer on ShowSymlinks on AllowOverwrite on UseReverseDNS off IdentLookups off AllowStoreRestart on AllowForeignAddress on LogFormat traff "%b %u" TimeoutLogin 120 TimeoutNoTransfer 600 TimeoutStalled 600 TimeoutIdle 1200 DisplayLogin welcome.msg DisplayFirstChdir message ListOptions "-l" #LsDefaultOptions "-l" DenyFilter \*.*/ DefaultRoot ~ # Uncomment this if you are using NIS or LDAP to retrieve passwords: # PersistentPasswd off # Port 21 is the standard FTP port. Port 21 # In some cases you have to specify passive ports range to by-pass # firewall limitations. Ephemeral ports can be used for that, but # feel free to use a more narrow range. #PassivePorts 49152 65534 # To prevent DoS attacks, set the maximum number of child processes # to 30. If you need to allow more than 30 concurrent connections # at once, simply increase this value. Note that this ONLY works # in standalone mode, in inetd mode you should use an inetd server # that allows you to limit maximum number of processes per service # (such as xinetd) MaxInstances 30 # Set the user and group that the server normally runs at. User nobody Group nogroup # Normally, we want files to be overwriteable. <Directory /*> # Umask 022 is a good standard umask to prevent new files and dirs # (second parm) from being group and world writable. Umask 022 022 # Normally, we want files to be overwriteable. AllowOverwrite on HideNoAccess on </Directory> # But not to overwrite ispCP Standard directories. <Directory ~/> PathDenyFilter "^/(backups|cgi-bin|htdocs|errors|logs|phptmp|statistics)/?$" </Directory> <Limit ALL> IgnoreHidden on </Limit> # Be warned: use of this directive impacts CPU average load! # # Uncomment this if you like to see progress and transfer rate with ftpwho # in downloads. That is not needed for uploads rates. # UseSendFile off <Global> RootLogin off TransferLog /var/log/proftpd/xferlog ExtendedLog /var/log/proftpd/ftp_traff.log read,write traff PathDenyFilter "\.quota$" </Global> # # SSL via TLS # #<IfModule mod_tls.c> # TLSEngine off # on for use of TLS # TLSLog /var/log/proftpd/ftp_ssl.log # where to log to # TLSProtocol SSLv23 # SSLv23 or TLSv1 # TLSOptions NoCertRequest # either to request the certificate or not # TLSRSACertificateFile /etc/proftpd/ssl.crt # SSL certfile # TLSRSACertificateKeyFile /etc/proftpd/ssl.key # SSL keyfile # TLSVerifyClient off # client verification #</IfModule> # # ISPCP Quota management; # <IfModule mod_quota.c> QuotaEngine on QuotaShowQuotas on QuotaDisplayUnits Mb SQLNamedQuery get-quota-limit SELECT "name, quota_type, per_session, limit_type, bytes_in_avail, bytes_out_avail, bytes_xfer_avail, files_in_avail, files_out_avail, files_xfer_avail FROM quotalimits WHERE name = '%{0}' AND quota_type = '%{1}'" SQLNamedQuery get-quota-tally SELECT "name, quota_type, bytes_in_used, bytes_out_used, bytes_xfer_used, files_in_used, files_out_used, files_xfer_used FROM quotatallies WHERE name = '%{0}' AND quota_type = '%{1}'" SQLNamedQuery update-quota-tally UPDATE "bytes_in_used = bytes_in_used + %{0}, bytes_out_used = bytes_out_used + %{1}, bytes_xfer_used = bytes_xfer_used + %{2}, files_in_used = files_in_used + %{3}, files_out_used = files_out_used + %{4}, files_xfer_used = files_xfer_used + %{5} WHERE name = '%{6}' AND quota_type = '%{7}'" quotatallies SQLNamedQuery insert-quota-tally INSERT "%{0}, %{1}, %{2}, %{3}, %{4}, %{5}, %{6}, %{7}" quotatallies QuotaLock /var/run/proftpd/tally.lock QuotaLimitTable sql:/get-quota-limit QuotaTallyTable sql:/get-quota-tally/update-quota-tally/insert-quota-tally </IfModule> <IfModule mod_ratio.c> Ratios on </IfModule> # Delay engine reduces impact of the so-called Timing Attack described in # http://security.lss.hr/index.php?page=details&ID=LSS-2004-10-02 # It is on by default. <IfModule mod_delay.c> DelayEngine on </IfModule> <IfModule mod_ctrls.c> ControlsEngine on ControlsMaxClients 2 ControlsLog /var/log/proftpd/controls.log ControlsInterval 5 ControlsSocket /var/run/proftpd/proftpd.sock </IfModule> <IfModule mod_ctrls_admin.c> AdminControlsEngine on </IfModule> # A basic anonymous configuration, no upload directories. # <Anonymous ~ftp> # User ftp # Group nogroup # # We want clients to be able to login with "anonymous" as well as "ftp" # UserAlias anonymous ftp # # Cosmetic changes, all files belongs to ftp user # DirFakeUser on ftp # DirFakeGroup on ftp # # RequireValidShell off # # # Limit the maximum number of anonymous logins # MaxClients 10 # # # We want 'welcome.msg' displayed at login, and '.message' displayed # # in each newly chdired directory. # DisplayLogin welcome.msg # DisplayFirstChdir .message # # # Limit WRITE everywhere in the anonymous chroot # <Directory *> # <Limit WRITE> # DenyAll # </Limit> # </Directory> # # # Uncomment this if you're brave. # # <Directory incoming> # # # Umask 022 is a good standard umask to prevent new files and dirs # # # (second parm) from being group and world writable. # # Umask 022 022 # # <Limit READ WRITE> # # DenyAll # # </Limit> # # <Limit STOR> # # AllowAll # # </Limit> # # </Directory> # # </Anonymous> /etc/proftpd: # # /etc/proftpd/proftpd.conf -- This is a basic ProFTPD configuration file. # To really apply changes reload proftpd after modifications. # # Includes DSO modules Include /etc/proftpd/modules.conf # Set off to disable IPv6 support which is annoying on IPv4 only boxes. UseIPv6 on ServerName "Debian" ServerType standalone DeferWelcome off MultilineRFC2228 on DefaultServer on ShowSymlinks on TimeoutNoTransfer 600 TimeoutStalled 600 TimeoutIdle 1200 DisplayLogin welcome.msg DisplayFirstChdir .message ListOptions "-l" DenyFilter \*.*/ # Use this to jail all users in their homes # DefaultRoot ~ # Users require a valid shell listed in /etc/shells to login. # Use this directive to release that constrain. # RequireValidShell off # Port 21 is the standard FTP port. Port 21 # In some cases you have to specify passive ports range to by-pass # firewall limitations. Ephemeral ports can be used for that, but # feel free to use a more narrow range. # PassivePorts 49152 65534 # If your host was NATted, this option is useful in order to # allow passive tranfers to work. You have to use your public # address and opening the passive ports used on your firewall as well. # MasqueradeAddress 1.2.3.4 # To prevent DoS attacks, set the maximum number of child processes # to 30. If you need to allow more than 30 concurrent connections # at once, simply increase this value. Note that this ONLY works # in standalone mode, in inetd mode you should use an inetd server # that allows you to limit maximum number of processes per service # (such as xinetd) MaxInstances 30 # Set the user and group that the server normally runs at. User proftpd Group nogroup # Umask 022 is a good standard umask to prevent new files and dirs # (second parm) from being group and world writable. Umask 022 022 # Normally, we want files to be overwriteable. AllowOverwrite on # Uncomment this if you are using NIS or LDAP to retrieve passwords: # PersistentPasswd off # Be warned: use of this directive impacts CPU average load! # Uncomment this if you like to see progress and transfer rate with ftpwho # in downloads. That is not needed for uploads rates. # # UseSendFile off # Choose a SQL backend among MySQL or PostgreSQL. # Both modules are loaded in default configuration, so you have to specify the backend # or comment out the unused module in /etc/proftpd/modules.conf. # Use 'mysql' or 'postgres' as possible values. # #<IfModule mod_sql.c> # SQLBackend mysql #</IfModule> TransferLog /var/log/proftpd/xferlog SystemLog /var/log/proftpd/proftpd.log <IfModule mod_tls.c> TLSEngine off </IfModule> <IfModule mod_quota.c> QuotaEngine on </IfModule> <IfModule mod_ratio.c> Ratios on </IfModule> # Delay engine reduces impact of the so-called Timing Attack described in # http://security.lss.hr/index.php?page=details&ID=LSS-2004-10-02 # It is on by default. <IfModule mod_delay.c> DelayEngine on </IfModule> <IfModule mod_ctrls.c> ControlsEngine on ControlsMaxClients 2 ControlsLog /var/log/proftpd/controls.log ControlsInterval 5 ControlsSocket /var/run/proftpd/proftpd.sock </IfModule> <IfModule mod_ctrls_admin.c> AdminControlsEngine on </IfModule> # A basic anonymous configuration, no upload directories. # <Anonymous ~ftp> # User ftp # Group nogroup # # We want clients to be able to login with "anonymous" as well as "ftp" # UserAlias anonymous ftp # # Cosmetic changes, all files belongs to ftp user # DirFakeUser on ftp # DirFakeGroup on ftp # # RequireValidShell off # # # Limit the maximum number of anonymous logins # MaxClients 10 # # # We want 'welcome.msg' displayed at login, and '.message' displayed # # in each newly chdired directory. # DisplayLogin welcome.msg # DisplayFirstChdir .message # # # Limit WRITE everywhere in the anonymous chroot # <Directory *> # <Limit WRITE> # DenyAll # </Limit> # </Directory> # # # Uncomment this if you're brave. # # <Directory incoming> # # # Umask 022 is a good standard umask to prevent new files and dirs # # # (second parm) from being group and world writable. # # Umask 022 022 # # <Limit READ WRITE> # # DenyAll # # </Limit> # # <Limit STOR> # # AllowAll # # </Limit> # # </Directory> # # </Anonymous> An den Fehlermeldungen hat sich nichts geändert. Könntet Ihr mir bitte nocheinmal einen Tipp geben? LG Alex RE: ispCP 1.0.0 RC6 und proftp - Killua - 08-11-2008 03:50 PM wäre net irgendwie schlau IPv6 auszuschalten ?? Quote:# Includes DSO modules oder liege ich da falsch ? Edit: Und versuch dich mal von Hand mit den Logindaten vftp und dem pw das in der conf steht in phpmyadmin (pma) einzuloggen - ob das geht. MfG Killua RE: ispCP 1.0.0 RC6 und proftp - fulltilt - 08-11-2008 06:09 PM Genau - Du musst IPv6 auf off stellen, mach danach mal ein killall proftpd - neu Proftpd starten ... Sztyler Wrote:wäre net irgendwie schlau IPv6 auszuschalten ?? RE: ispCP 1.0.0 RC6 und proftp - gOOvER - 08-11-2008 06:42 PM Das Problem gab's vor kurzen schon mal. mysql was dort nicht geladen. Das kann ich mir hier auch vorstellen. RE: ispCP 1.0.0 RC6 und proftp - neppumuck - 08-11-2008 08:53 PM Hallo zusammen, herzlichen Dank an alle !!! Das Problem ist gelöst. 1. mysql wurde nicht geladen: SQLBackend mysql war auskommentiert. 2. Musste ich in die /etc/ispcp/proftpd/proftpd.conf folgendes eintragen: #<IfModule mod_sql.c> SQLBackend mysql SQLAuthTypes Crypt SQLAuthenticate on SQLConnectInfo ispcp@localhost vftp passwort SQLUserInfo ftp_users userid passwd uid gid homedir shell SQLGroupInfo ftp_group groupname gid members SQLMinID 2000 #</IfModule> 3. IPV6 Abschalten UseIPv6 off Dann ging es :-) Noch kurz eine Frage: Im Augenblick kann der FTP User bis hoch zur / alle Verzeichnisse einsehen. Wie kann ich das ändern? Nochmals vielen Dank für die schnellen und sehr guten Hilfen! LG Alex |