Vsftpd and virtual users - SOLVED!

I have followed the wiki to build my vsftpd server, which works fine with local users
However, I wanted to build the server with virtual users, and I have made everything as described in the wiki,
but it doesn't work - I got a 530 error - Login incorrect.
I think it should be a problem with the password database file, but how to solve it?
here's my vsftpd.conf:
CODE:
listen=YES
anonymous_enable=NO
local_enable=YES
write_enable=YES
dirmessage_enable=YES
xferlog_enable=YES
connect_from_port_20=YES
xferlog_file=/var/log/vsftpd.log
#ftpd_banner=Welcome to blah FTP service.
chroot_local_user=YES
pam_service_name=ftp
guest_enable=YES
guest_username=virtual
virtual_use_local_privs=YES
Last edited by scar (2010-05-07 05:43:33)

I don't think so :
cat /etc/passwd | grep virtual
virtual:x:1002:1002::/srv/ftp:/bin/bash
ls -l /srv/
drwxr-xr-x 2 virtual virtual 4096 máj 6 22.20 ftp
cat /etc/pam.d/ftp
auth required /lib/security/pam_userdb.so db=/etc/vsftpd_login
crypt=hash account required /lib/security/pam_userdb.so db=/etc/vsftpd_login crypt=hash

Similar Messages

[SOLVED] vsFTP and virtual users

EDIT: One should really install pam_pwdfile if he wants this to work (it's also in the wiki, but I'm blind)
Hey,
I'm trying to set up vsFTP with virtual users on my machine. Here is what I did:
# pacman -S vsftpd
# mkdir /etc/vsftpd
# htpasswd -cd /etc/vsftpd/.passwd ftpguest
*password*
# vi /etc/pam.d/vsftpd
auth required pam_pwdfile.so pwdfile /etc/vsftpd/.passwd
account required pam_permit.so
# useradd -d /storage/ftp virtual
# chown virtual:virtual /storage/ftp
My /etc/vsftpd.conf:
anonymous_enable=NO
pam_service_name=vsftpd
hide_ids=YES
local_enable=YES
dirmessage_enable=YES
xferlog_enable=YES
connect_from_port_20=YES
chroot_local_user=YES
local_root=/storage/ftp/$USER
user_sub_token=$USER
guest_enable=YES
guest_username=virtual
virtual_use_local_privs=YES
listen=YES
# mkdir /storage/ftp/ftpguest
# chown virtual:virtual /storage/ftp/ftpguest
# systemctl start vsftpd.service
Then I point my browser to ftp://myip and I get a prompt for username and password, but the problem is that the user I created (ftpguest) can't log in. What am I missing?
Thanks
Last edited by developej (2014-05-10 20:38:59)

EDIT: One should really install pam_pwdfile if he wants this to work (it's also in the wiki, but I'm blind)
Hey,
I'm trying to set up vsFTP with virtual users on my machine. Here is what I did:
# pacman -S vsftpd
# mkdir /etc/vsftpd
# htpasswd -cd /etc/vsftpd/.passwd ftpguest
*password*
# vi /etc/pam.d/vsftpd
auth required pam_pwdfile.so pwdfile /etc/vsftpd/.passwd
account required pam_permit.so
# useradd -d /storage/ftp virtual
# chown virtual:virtual /storage/ftp
My /etc/vsftpd.conf:
anonymous_enable=NO
pam_service_name=vsftpd
hide_ids=YES
local_enable=YES
dirmessage_enable=YES
xferlog_enable=YES
connect_from_port_20=YES
chroot_local_user=YES
local_root=/storage/ftp/$USER
user_sub_token=$USER
guest_enable=YES
guest_username=virtual
virtual_use_local_privs=YES
listen=YES
# mkdir /storage/ftp/ftpguest
# chown virtual:virtual /storage/ftp/ftpguest
# systemctl start vsftpd.service
Then I point my browser to ftp://myip and I get a prompt for username and password, but the problem is that the user I created (ftpguest) can't log in. What am I missing?
Thanks
Last edited by developej (2014-05-10 20:38:59)

[solved] VSFTPD + Virtual Users + different home directories

Hi All,
I've been trying to get VSFTPD setup to allow ftp access to some of my clients to access their web files. I've got VSFTPD up and running via the Wiki, but my virtual users can't log in. The only thing that I didn't do from the wiki was the "useradd virtual" as I didn't think it was needed. Also, the wiki only covers one directory for all users, I want to have each user to have access to their own web directory and nothing else. I think I may just have something a little off in my vsftpd file. Thanks!
vsftpd.conf
anonymous_enable=NO
local_enable=YES
write_enable=YES
dirmessage_enable=YES
xferlog_enable=YES
connect_from_port_20=YES
data_connection_timeout=120
listen=YES
virtual_use_local_privs=YES
pam_service_name=vsftpd
guest_enable=YES
user_sub_token=$USER
chroot_local_user=YES
hide_ids=YES
local_root=/srv/http/$USER
Last edited by GravityGripp (2009-05-14 17:36:19)

GravityGripp wrote:
I don't think it's a directory permissions issue as it's telling me that my login is incorrect.
Here's my /etc/pam.d/ftp
auth required /lib/security/pam_userdb.so db=/etc/vsftpd_login crypt=hash
account required /lib/security/pam_userdb.so db=/etc/vsftpd_login crypt=hash
here's part of my auth.log also.
May 14 08:14:08 arthur vsftpd: pam_unix(vsftpd:auth): check pass; user unknown
May 14 08:14:08 arthur vsftpd: pam_unix(vsftpd:auth): authentication failure; logname= uid=0 euid=0 tty=ftp ruser=current_user rhost=127.0.0.1
May 14 08:24:14 arthur vsftpd: pam_unix(vsftpd:auth): check pass; user unknown
May 14 08:24:14 arthur vsftpd: pam_unix(vsftpd:auth): authentication failure; logname= uid=0 euid=0 tty=ftp ruser=current_user rhost=127.0.0.1
Hi GravityGripp,
as posted at the beginning of the thread in /etc/vsftpd.conf the 'pam_service_name' option is 'vsftpd' but here you are referencing /etc/pam.d/ftp as PAM service name but in vsftpd.conf you told to use 'vsftpd' as PAM service for auth.
About your need to define different directory for each ftp virtual user in my installation I allow ftp access to virtual users (defined in MySQL and auth via pam_mysql); to let users have access to their own ftp directory (with different auth read only / read-write) I used the user_config_dir option (see man vsftpd.conf).
Here an extract of my '/etc/vsftpd.conf':
# This powerful option allows the override of any config option specified
# in the manual page, on a per-user basis. Usage is simple, and is best
# illustrated with an example. If you set user_config_dir to be /etc/vsftpd_user_conf
# and then log on as the user "chris", then vsftpd will apply the settings
# in the file /etc/vsftpd_user_conf/chris for the duration of the session.
# Default: (none)
user_config_dir=/etc/vsftpd/vsftpd-user-conf
Each time I add a new ftp virtual user that need a personal ftp directory, under the dir '/etc/vsftpd/vsftpd-user-conf' I create a file named as the username where I define the personal ftp directory and the auth on it (RO or RW).
Example for user 'test' (file '/etc/vsftpd/vsftpd-user-conf/test'):
# vsftpd per-user basis config file (override of any config option specified
# in the vsftpd server config file)
# TEMPLATE
# User test - Description for user test
# Set local root
local_root=/srv/vsftpd/test
# Disable any form of FTP write command.
# Allowed values: YES/NO
write_enable=YES
Of course the dir must exist and have the right permissions to allow the user to connect.
Hope that this will be of help.
bye

Virtual global user with vsftpd and pam?

I followed the ArchWiki for setting up vsftpd with xinetd and pam. It works great for our clients to be able to upload/download from their own directory and have some privacy. Now I need to setup a couple of 'global' ftp user accounts that can be used by the production staff to browse the 'private' folders. Anyone know how this can be done? From what I've read so far, if guest_enable=YES, then local users cannot login even if local_enable=YES is set.
Here's my vsftpd.conf:
anonymous_enable=NO
local_enable=YES
write_enable=YES
dirmessage_enable=YES
tcp_wrappers=YES
pam_service_name=ftp
xferlog_enable=YES
local_umask=022
listen=NO
connect_from_port_20=YES
chroot_local_user=YES
guest_enable=YES
guest_username=virtual
virtual_use_local_privs=YES
local_root=/pub/ftp/$USER
user_sub_token=$USER
hide_ids=YES

LOL, fail. Here's the site:
ftp://vsftpd.beasts.org/users/cevans/un … S_2/README

[Solved] Pure-ftpd only virtual users

Dear arch-users
I'm using pureftpd from extra. I've created a lot of virtual users for my LAN, everything is working fine.
But it is possible for system users to log on an see their whole /home/users directory, with their user/pass combo. I've disabled it, by setting the minUID to a very high number, but I think their is a more decent solution for this problem.
So what is the best solution to only allow virtual-users to log on?
Last edited by YscO (2007-07-15 10:49:16)

Solved the case
# If you want to enable PAM authentication, uncomment the following line
PAMAuthentication no
# If you want simple Unix (/etc/passwd) authentication, uncomment this
UnixAuthentication no

Virtual User Minutes, Load Testing, and Billing

I am struggling with figuring out how to handle my QA organization's potential use of the Cloud-Based Load Testing. I have about 30 individuals in my QA organization with MSDN Ultimate licenses. Many of these individuals do not do Load Testing.
Ideally I would like to 'pool' all of their 15,000 Virtual User Minutes together - and have my organization be able to use those minutes for our monthly load testing, as the individuals that would be doing the testing invidually would exceed their own
15,000 Virtual User Minutes; plus - in a large organization, having individuals utilize their own MSDN benefits seems odd.
How does the Windows Azure Organization Account option fit into this?
Our company also has a Enterprise Azure Agreement - but I'm not sure how that works either - in order to determine how I would budget for these costs.
We would only be utilizing the Load Testing option within my team. Please advise on how I determine what route to go and potential budget.

Hi Psandstrom,
I understand that you are looking forward to know about the Azure benefits for MSDN users, every MSDN user /individual can get up to $150/month.
If you exceed your monthly credits, your service will be disabled for that month. You can choose to turn off your Spending Limit, and any usage each month in excess of the monthly credits will be charged at the rates specified in this offer. For more information
See
Monthly Azure credits.
To grab the benefits, I recommend you to let the 30 individuals who own MSDN licenses to activate the Azure benefits.
To activate Azure benefits, log into http://msdn.microsoft.com , select My Account and click
activate azure.
Hope this answers your query.
Regards,
Shirisha Paderu

Copy select value in the textfield from LOV and allow user to edit it

Hi,
I have a datablock with 20 records and each record has comments (say field_comments) fields. I would like to allow user to choose predefined comments populated from LOV (say lov_comments) and to append some extra comments after they choose the value from LOV.
I have created a LOV and added Return type “field_comments” in the column mapping properties. When user clicks on a button, LOV opens up. They select the value from the LOV and the value goes to “field_comment” field. The problem with this approach, user can’t add their comment after selecting from LOV.
I tried this way too. I created another non-visible textbox (say dummy). In the LOV, I added “dummy” field as returntype. In the dummy field, I have created “POST-CHANGE” trigger which basically says :block. field_comments = :block. Dummy.
But, the user has to click on other field to view the selected value from the LOV. The values in the “field_comments” is not updated as soon as user click on “OK” button in the LOV.
I would appreciate it if somebody could give me some input and help to solve my issue. Thank you for your help.
Thank.

Well, I tried exactly what you posted and it allowed me to SELECT from LOV and then CHANGE/APPEND new text in front of returned value in the field. It saved to the database and queried without any problems.
Is your item allowed to INSERT/UPDATE ? If not, then set "Update/Insert Allowed" properties to Yes and attach your LOV to the item and set "Validate from list" to No.
You may also see if you have any validation being performed on WHEN-VALIDATE-ITEM or POST-CHANGE trigger which will fail since you are editing the values populated from LOV.
Hope it helps!

SharePoint 2013 - What are all requirement components for People Pickers to list, search, display, and assign users permission

Hi All
the past few months, I have been working with permission issues related to SharePoint 2013 site permission settings using People Pickers to list, search, display users to assign or check permission.
Our environment include multiple domains and few forests. Our SharePoint farm is installed on one domain but the good thing is our AD structure are configured to have all other domains and forests with 2 ways trusts with this domain so domain
users are authenticated and can access SharePoint just fine. Also SharePoint use default claim authentication.
The problem is People Picker is not display all domains user accounts when site owners need to assign permission. So to resolve the problem, I had provisioned
SA - User profile service and Import AD domain user accounts (one way) into Sharepoint.
I configured stsadm.exe -o setproperty -pn peoplepicker-searchadforests -pv
for all domains and forests (eventhough, as mentioned we do have 2 ways trust)
and sometime tried different query (user last name, domain\logonname, email address) if one is not showing.
With all that added, People Pickers seem to find and display user account for all domains now.
My question now is do UPS and all AD domains users need to be imported into SharePoint and STSadm configuration are required in order to have all domains user accounts to display in People Pickers so the site owners can
find them and assign permission when needed?
Please share your advices, comments as they are really valuable to me.
Thanks
Swanl

UPS and people pickers are virtually unrelated. The only connection between them is to do with caching and updating user names and emails if they change over time, or in other words not relevant to your situation.
To answer your question directly; Nope, you do not need to set up synchronisation connections to a domain to be able to pick up a person in a people picker. As you've seen you may need to run some STSADM commands to make sure they are checking the right
places.

Virtual users

I've only just recently migrated to OSX server since the release of snow leopard. Ive come from a debain server.
I used to be able to have a virtual user table under sendmail allowing me to have multiple domains with similar usernames in each domain thus:-
[email protected] domain1username
[email protected] domain2username
It seems under workgroup manager (is this the place to add these?) under shortnames even if i create a shortname for domain1username that is [email protected] and a shortname for domain2username that is [email protected] the mail server wont allow mails for [email protected], bouncing with the error message <[email protected]>: User unknown in virtual alias table
Can anyone shed any light or point me to a manual/fix?
Thanks muchly!
Andy

Here's what I've found that works.
In WGM in addition to the shortname you need to add the email address. In this case your username for domain1 and domain2 are the same.
andy
[email protected]
[email protected]

Most common BW data load errors in production and how to solve them ..

Hi All,
Most common BW data load errors in production and how to solve them ..
Any doc on it ,if so plz send it across to this id [email protected]
Thanks in advance.
Rgrds
shoba

hi
1) RFC connection lost.
2) Invalid characters while loading.
3) ALEREMOTE user is locked.
4) Lower case letters not allowed.
5) While loading the data i am getting messeage that 'Record
the field mentioned in the errror message is not mapped to any infoboject in the transfer rule.
6) object locked.
7) "Non-updated Idocs found in Source System".
8) While loading master data, one of the datapackage has a red light error message:
Master data/text of characteristic 'so and so' already deleted .
9) extraction job aborted in r3
10) request couldnt be activated because theres another request in the psa with a smaller sid
11) repeat of last delta not possible
12) datasource not replicated
13) datasource/transfer structure not active ´
14) Idoc Or Trfc Error
15. ODS Activation Error

LoadRunner SAPGUI Virtual Users Decline

I am trying to perform a Load Test on SAP R/3 using LoadRunner 9.5. I have 120 virtual users that I would like to run for an hour. I have distributed these 120 vusers over 6 scenarios on 5 load generators. The maximum number of virtual users that I have been able to run at one time is 114. The number then slowly declines over the next 40 minutes and stabilizes at 91 vusers (which run for the remaining hour). The messages I get from LoadRunner indicate that users have logged on and navigated to their assigned transaction code in SAP, but fail to perform the first step in that transaction code (this happens for ME21N, ME22N, ME23, FB10, F-43 which is all of the transaction codes that I am testing). I have worked with the Basis Group here to ensure that there are enough interactive dialog work processes, set each scenarios think time to random, initialize and start each vuser individually, and ensured that each load generator has enough RAM. The only thing left that I know to try is to increase the number of dialog processes per user. However, we cannot figure out the parameter name to do this. If anyone knows the name of this parameter or have any other suggestions, please let me know. Thanks!

Hello Andy,
We are having a similar problem, did you ever get an answer about this issue?
Thank you!

Looking for Game Developers/Producers and Virtual World Developers for Adobe Research Study

The Adobe User Research Team is interested in talking to game developers/producers and virtual world developers to better understand the development process, the tools/technologies used, and the development/business challenges. Your insights will help us improve our platform and tools as well as develop new solutions. You do not need to be Flash developers to participate.
The research study will be a 2-hour one-on-one phone interview. As a token of appreciation, interview participants will receive a $150 American Express Gift Check.
If this sounds like something you might be interested in, please fill out our short preliminary screener here:
http://www.adobe.com/go/gamedevscreener
If the study is a good match, we will contact you by phone or email to schedule a time.
If you have any questions, please feel free to contact me at [email protected]
Thank you for your interest!
Sara Kang
Adobe Market Research

FYI, this is a poorly worded set of possible answers:
8. How much experience do you have using the following technologies?
I’ve never heard of that technology
I’ve investigated that technology but never used it professionally
I’ve spent some time working with that technology
I am comfortable using that technology
I have used that technology on a daily basis for less than 1 year
I have used that technology on a daily basis for more than 1 year
For a number of these technologies, I've heard of them but have not been inclined to investigate, which seems like it would be useful info to Adobe.

Pure-ftpd - different permissions for virtual users?

I seem not to be able to find out how I could declare different permissions for different virtual users. In /etc/pure-ftpd.conf exists one line to declare permissions using
#umask file:folder
umask 133:133
umask matches the numbers to 'UserGroupOthers'.
Now that virtual ftp users belong to a real existing unix user / group, I wonder who is Users, Group and Others?
Users = virtual ftp user ?
Group = virtual ftp group ?
Others = anonymous visitors?
How can I tune it, so one virtual user can add files - f.e. to be used by a scan station - while others shall only read, having anonymous disabled?
This gives me a headache.

Ok, let me think. What did I do?
I had different users. User X, Y and Z.
Then, I had a shared directory above their home directories.
While in the system, (not in pure-ftpd) I symlinked.
(Note that doing something in user X's directory, like ln -s ../shared didn't work---I had to do ln -s /usr/home/ftpuser/shared).
Then, I ~think I played with the permissions on shared and got what I wanted.
Then, after a few hours on this, they changed their minds about what they wanted, everyone was allowed to use shared, but different companies had to have their own directories, so I no longer have that config.
For what it's worth, you can take a quick look at my page
http://www.scottro.net/qnd/qnd-pureftpd.html
but I don't think it covers that situation.
HTH, though I doubt that it did.

My problem in using weblogic Datasource and proxy user

Hello
I create a DataSource in Weblogic that connect to the database by a proxy user and I have a client application that use this DataSource and create a proxy session , I've written my client application (it's a stand alone client application) code below :
public static void main(String [] args) {
OracleConnection conn=null;
javax.sql.DataSource ds=null;
Hashtable env = new Hashtable();
env.put( Context.INITIAL_CONTEXT_FACTORY, "weblogic.jndi.WLInitialContextFactory" );
env.put(Context.PROVIDER_URL, "t3://127.0.0.1:7001");
try{
Context context=new InitialContext( env );
ds=(javax.sql.DataSource) context.lookup ("OracleConnection2");
conn=(OracleConnection) ds.getConnection();
java.util.Properties prop = new java.util.Properties();
prop.put(OracleConnection.PROXY_USER_NAME, "web_user1");
prop.put(OracleConnection.PROXY_USER_PASSWORD,"web_user1");
conn.openProxySession(OracleConnection.PROXYTYPE_USER_NAME, prop);
if (conn.isClosed()){
System.out.println("Connection closed");
return;
testJDBC(conn,true);
for(int k=0;k<10;k++){
testJDBC(conn,false);
conn.close(OracleConnection.PROXY_SESSION);
conn.close();
}catch(Exception ex){
ex.printStackTrace();
It works but my problem is that in line "prop.put(OracleConnection.PROXY_USER_PASSWORD,"web_user1")" or line "prop.put(OracleConnection.PROXY_USER_NAME, "web_user1");"
Let me to mention a scenario :
*1- I type a wrong username or password in my client application and I run the client application it shows me this error : invalid username/password*
*this error is acceptable*
*2- then I correct the wrong username or password immediately and run the application again , it shows me this error (at line conn.openProxySession(OracleConnection.PROXYTYPE_USER_NAME, prop)) :*
java.sql.SQLException: Closed Connection
     at weblogic.rjvm.ResponseImpl.unmarshalReturn(ResponseImpl.java:234)
     at weblogic.rmi.internal.BasicRemoteRef.invoke(BasicRemoteRef.java:223)
     at weblogic.jdbc.rmi.internal.ConnectionImpl_weblogic_jdbc_wrapper_JTAConnection_weblogic_jdbc_wrapper_XAConnection_oracle_jdbc_driver_LogicalConnection_1032_WLStub.openProxySession(Unknown Source)
     at weblogic.jdbc.rmi.SerialConnection_weblogic_jdbc_rmi_internal_ConnectionImpl_weblogic_jdbc_wrapper_JTAConnection_weblogic_jdbc_wrapper_XAConnection_oracle_jdbc_driver_LogicalConnection_1032_WLStub.openProxySession(Unknown Source)
     at oracle.HRFacadeClient.main(HRFacadeClient.java:38)
*3- I run the application again (by correct username and password) but this time it shows me this error :*
java.sql.SQLException: Unsupported feature
     at weblogic.rjvm.ResponseImpl.unmarshalReturn(ResponseImpl.java:234)
     at weblogic.rmi.internal.BasicRemoteRef.invoke(BasicRemoteRef.java:223)
     at weblogic.jdbc.rmi.internal.ConnectionImpl_weblogic_jdbc_wrapper_JTAConnection_weblogic_jdbc_wrapper_XAConnection_oracle_jdbc_driver_LogicalConnection_1032_WLStub.openProxySession(Unknown Source)
     at weblogic.jdbc.rmi.SerialConnection_weblogic_jdbc_rmi_internal_ConnectionImpl_weblogic_jdbc_wrapper_JTAConnection_weblogic_jdbc_wrapper_XAConnection_oracle_jdbc_driver_LogicalConnection_1032_WLStub.openProxySession(Unknown Source)
     at oracle.HRFacadeClient.main(HRFacadeClient.java:38)
*4 - if I repeat running the application for multi times every time it shows me the previous error*
*5- I wait about one minute the problem solved and my application can create proxy session *
the result is that if I wanna create proxy session by wrong username or password and I get "Invalid username/password" error message , then after correcting username or password I have to wait about one minute and then run the application again_
Do you know how I can overcome this problem ?
Thank you

Hi Jamshid,
There is same problem observed few days back with us, and we have used the below code, and it got solved. Actually there is a problem observed while using proxy connections on weblogic.
if(conn instanceof weblogic.jdbc.extensions.WLConnection){
     weblogic.jdbc.extensions.WLConnection cn=(weblogic.jdbc.extensions.WLConnection)conn;
     cn.clearStatementCache();
http://rocksolutions.wordpress.com/2010/06/04/connection-pool-issue-on-weblogic/
Hope this helps.
Thanks

Adobe you can't leave us here alone and hope we solve your bugs.

Before reading this post read this thread to see which bug
I'm refering to
http://www.adobe.com/cfusion/webforums/forum/messageview.cfm?forumid=68&catid=472&threadid =1220404&enterthread=y
This is a real life situation that could be a great example
for the adobe guys. maybe we will be lucky and one of them will
give us the honor of actualy replying our posts.
I'm currently at the 3GSM conference. We have a product demo
the is part symbian and part flash lite 2.0 mockup. the interface
is seamless and for our custommers this is one demo.
We have many potentials customers that want to take the demo
with them. we are talking of real life deals worth millions of
dollars.
When we bult the demo your strategy was that eas phone would
have a it's specific player and we build our demo acording to that
(not that we understood then why the player is not simply
downloaded over the air) but now when our users want to install our
demo thez can't. you know why?
you have changes your strategy and now everyone can doenload
a player. but you forgot to do one thing.... make the player
work!!!
So I'm here in Barcelona. my clients love the demo but no one
can take it with them.
We are using your products for 10 years because we love them.
thinking of it our love as a community has made your product what
they are.
give us the honor of entering our forums once in a while and
helping us solve the bugs we can't fix. the rest of the design
folts we can solve by work arounds we have been doing this for
years.
thanks
Avi

Ciao,
we are in a similar situation of Avich!
please: "give us the honor of entering our forums once in a
while and helping us solve the bugs we can't fix. the rest of the
design folts we can solve by work arounds we have been doing this
for years".

Vsftpd and virtual users - SOLVED!

Similar Messages

Maybe you are looking for