Page 3 of 3

Re: proFTPd doesn't want to login

Posted: 07 Jul 2010, 11:04
by rustypup
hmm...
By default, proftpd will ask every configured authentication module about a given user, until it finds an authentication module that knows about that user, or until an authentication module signals an unrecoverable error. The order in which these modules are asked depends on the order of modules in the --with-modules option used when configuring proftpd.
- form the mini how-to...

AuthOrder try changing the mod_auth_xxx around to see if this isn't an auth conflict resolution issue?

Re: proFTPd doesn't want to login

Posted: 07 Jul 2010, 11:21
by DarkRanger
Noticed something weird in my auth.log file. It's trying to bind to the LDAP server which it can't find. This is not necessary... how do I disable this?

Code: Select all

Jul  7 11:20:43 ubuntu proftpd: nss_ldap: could not connect to any LDAP server as (null) - Can't contact LDAP server
Jul  7 11:20:43 ubuntu proftpd: nss_ldap: failed to bind to LDAP server ldap://41.137.44.217/: Can't contact LDAP server
Jul  7 11:20:43 ubuntu proftpd: nss_ldap: reconnecting to LDAP server (sleeping 1 seconds)...

Re: proFTPd doesn't want to login

Posted: 07 Jul 2010, 11:47
by DarkRanger
rustypup wrote:hmm...
By default, proftpd will ask every configured authentication module about a given user, until it finds an authentication module that knows about that user, or until an authentication module signals an unrecoverable error. The order in which these modules are asked depends on the order of modules in the --with-modules option used when configuring proftpd.
- form the mini how-to...

AuthOrder try changing the mod_auth_xxx around to see if this isn't an auth conflict resolution issue?
Nope, still a delay when authenticating.

Re: proFTPd doesn't want to login

Posted: 07 Jul 2010, 12:35
by DarkRanger
DarkRanger wrote:Noticed something weird in my auth.log file. It's trying to bind to the LDAP server which it can't find. This is not necessary... how do I disable this?

Code: Select all

Jul  7 11:20:43 ubuntu proftpd: nss_ldap: could not connect to any LDAP server as (null) - Can't contact LDAP server
Jul  7 11:20:43 ubuntu proftpd: nss_ldap: failed to bind to LDAP server ldap://41.137.44.217/: Can't contact LDAP server
Jul  7 11:20:43 ubuntu proftpd: nss_ldap: reconnecting to LDAP server (sleeping 1 seconds)...
Forgot to mention that this error only occurs when I do a FTP login. Be it remotely or via FileZilla

Re: proFTPd doesn't want to login

Posted: 07 Jul 2010, 12:48
by rustypup
perhaps excise any reference to ldap in your configs... (but i don't see it in the listed modules...)

i believe pam_unix should be the only entry in your AuthOrder queue, (at least, it's the plain local auth module...)

Re: proFTPd doesn't want to login

Posted: 07 Jul 2010, 13:39
by DarkRanger
added pam_unix.c and now it goes through all the steps correctly but then fails with Response:

Code: Select all

530 Login incorrect.
Error:	Critical error
Error:	Could not connect to server

Re: proFTPd doesn't want to login

Posted: 07 Jul 2010, 13:42
by rustypup
:lol: i'm going to go out on a limb and say that your creds aren't located in pam.... sql?

Re: proFTPd doesn't want to login

Posted: 07 Jul 2010, 13:49
by DarkRanger
I have no freaking idea where it is located. I added it this way:

Code: Select all

sudo useradd userftp -p ************* -d /var/www -s /bin/false

Re: proFTPd doesn't want to login

Posted: 07 Jul 2010, 14:03
by rustypup
hold on... AuthOrder should probably read:

Code: Select all

AuthOrder     mod_auth_pam.c mod_auth_unix.c

Re: proFTPd doesn't want to login

Posted: 07 Jul 2010, 14:18
by DarkRanger
The delay is back.

Re: proFTPd doesn't want to login

Posted: 07 Jul 2010, 14:27
by rustypup
and if you swap the unix and pam modules?

Re: proFTPd doesn't want to login

Posted: 07 Jul 2010, 15:20
by DarkRanger
Logs show the same ldap error again and there is still a delay.

Re: proFTPd doesn't want to login

Posted: 07 Jul 2010, 15:40
by DarkRanger
I wonder... How can I make proftpd work from an SQL database. That way I can just put the SQL authentication first and it should work better don't you think?

Re: proFTPd doesn't want to login

Posted: 07 Jul 2010, 16:04
by DarkRanger
On a side note rusty. Now that you are here, what does this error mean? I get it every 10 seconds exactly, and it's in the auth.log file where I get the nss_ldap error also.

Code: Select all

Jul  7 16:03:08 ubuntu getty[5080]: /dev/hvc0: No such file or directory
Jul  7 16:03:18 ubuntu getty[5081]: /dev/hvc0: No such file or directory
Jul  7 16:03:28 ubuntu getty[5083]: /dev/hvc0: No such file or directory
Jul  7 16:03:38 ubuntu getty[5084]: /dev/hvc0: No such file or directory

Re: proFTPd doesn't want to login

Posted: 12 Jul 2010, 12:13
by rustypup
search me ... no idea.. the only time i've seen reference to "hvc" devices was on a wireless share.... :/

Re: proFTPd doesn't want to login

Posted: 21 Jul 2010, 11:06
by DarkRanger
Rusty, any idea on how to make it not try and login using LDAP??

Re: proFTPd doesn't want to login

Posted: 21 Jul 2010, 11:18
by rustypup
no idea... if removing all reference to it in the AuthOrder line failed, perhaps you could try removing the ldap module itself?

Re: proFTPd doesn't want to login

Posted: 21 Jul 2010, 11:34
by DarkRanger
rustypup wrote:no idea... if removing all reference to it in the AuthOrder line failed, perhaps you could try removing the ldap module itself?
See that is the problem. The LDAP module is required. :|

Re: proFTPd doesn't want to login

Posted: 21 Jul 2010, 11:39
by rustypup
i'm referring to proftpd-ldap, not the system's ldap instance... unless this is now married to the default install package?

Re: proFTPd doesn't want to login

Posted: 21 Jul 2010, 11:50
by DarkRanger
It says it can't find the file proftpd-ldap... Tried it just now again. That is what I don't understand...

Re: proFTPd doesn't want to login

Posted: 21 Jul 2010, 11:58
by rustypup
then i'd suggest spamming the proftpd support forums...... i'm as stumped as a shut-in with a big jar of mustard...

if you do get a successful resolution, i'd love to hear about it... :)