Howto: Easy FTP with vsftpd

[Glandoux]

Ok, i found the problem.
Now my ftp works with virtual users.

Why it wasn't working? It's because i was trying to use SSL.
So if i set this option in vsftpd.conf : ssl_enable=YES, my ftp server won't start, and i get this error : init: vsftpd main process (2692) terminated with status 1
init: vsftpd respawning too fast, stopped

So now i have a new problem, can't work with ssl.

Any idea?

thanks,

[wconstantine]

I've set up virtual users. The home dir for them should be /media/truecrypt1. I've mounted an encrypted partition that I want the FTP users to gain access to. I've added my own system user to the workers group and I'm now trying to change the group permissions on /media/truecrypt1.

Anything I throw at it doesn't work. E.g:

wh1sk3yj4ck@valkyrie:/media$ ls -l
total 44
drwx------ 1 wh1sk3yj4ck wh1sk3yj4ck 40960 2010-10-21 20:38 truecrypt1
drwxr-xr-x 6 wh1sk3yj4ck workers 4096 2010-10-21 20:32 truecrypt2
wh1sk3yj4ck@valkyrie:/media$ sudo chgrp -R workers truecrypt1
wh1sk3yj4ck@valkyrie:/media$ ls -l
total 44
drwx------ 1 wh1sk3yj4ck wh1sk3yj4ck 40960 2010-10-21 20:38 truecrypt1
drwxr-xr-x 6 wh1sk3yj4ck workers 4096 2010-10-21 20:32 truecrypt2
wh1sk3yj4ck@valkyrie:/media$

Wth? The other volume worked just fine.

[live4fun]

I am new to vsftp. Thanks for the guidance this howto provides.

But as life is never that easy i have some questions

The FTPS setup in the first post mentions those options for the vsftpd.conf

ssl_tlsv1=YES
ssl_sslv2=YES
ssl_sslv3=YES

I was looking at the man page in parallel to verify what i am doing and couldn't find those listed. (Perhaps those changed over time?)

There is an option ssl_ciphers which seems like an adequate replacement to choose allowed encryption algorithms.

But I am not a 100% confident which are considered to be safe these days. I found a post on another forum here suggesting this setup

ssl_ciphers=ADH-AES256-SHA:DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:AES256-SHA

Could anybody with a profound security background tell me if it is wise/safe to choose those options?

Thanks guys for the effort you put into this forum!

[al_mic]

Hi,

Is it possible to have in VSFTPD same username for login to more that one domain?

Example: I want to create the user "test" for domain mydomain.com
And then I what to create the user "test" for domain yourdomain.com

And both mydomain.com and yourdomain.com point to the same VSFTPD server that has only one public IP address.

Is it possible to make VSFTPD know which user tries to log in from the two and place it in his correct home directory?

For example if I try to user for login the username: test@mydomain.com
And for a different login to use test@yourdomain.com

How can I do this in VSFTPD?

Can you please tell me.

Thank you.

[mordriel]

Hi there.
So, I've got vsftpd working. ... Mostly. When I try to connect through FileZilla using ServerType and FTPES, I get "PASS" for my connection with the password and whatnot... but then it spits this out:

GnuTLS error -8: A record packet with illegal version was received.

Has anyone ever had a similar issue, or know what it's about? I'm rather lost...

Thanks!

[nebileix]

Hi there.
So, I've got vsftpd working. ... Mostly. When I try to connect through FileZilla using ServerType and FTPES, I get "PASS" for my connection with the password and whatnot... but then it spits this out:

GnuTLS error -8: A record packet with illegal version was received.

Has anyone ever had a similar issue, or know what it's about? I'm rather lost...

Thanks!

Got that error sometime back too. Cant recall how i fixed it.

Maybe u can start with those customized setting that u had on ur vsftpd.conf so as to troubleshoot easier.

Start by commenting out those customized settings... Thats how I solve the issue.

PS: Remember not to post sensitive information.

[karthick87]

These are my settings,how ever when i type ftp://127.0.0.1 in browser i am taken to /home/karthick instead of /srv/ftp why??

listen=YES
anonymous_enable=YES
local_enable=YES
write_enable=YES
anon_upload_enable=YES
anon_mkdir_write_enable=YES
dirmessage_enable=YES
xferlog_enable=YES
connect_from_port_20=YES
chown_uploads=YES
chown_username=karthick
ftpd_banner=Welcome to FTP service.
secure_chroot_dir=/var/run/vsftpd
pam_service_name=vsftpd
rsa_cert_file=/etc/ssl/certs/vsftpd.pem
anon_root=/srv/ftp

[nebileix]

if im not wrong, karthick is a user in the system right? and when u log, do u see something like [SSL Cipher ##########]?

[karthick87]

No i dont see such things.

[nebileix]

if im not wrong, karthick is a user in the system right? and when u log, do u see something like [SSL Cipher ##########]?

How about that above?