My users can only FTP using SFTP

[savy2k]

I have had this problem since I installed ISPConfig. Noone can FTP in to their account except through SFTP. That's no big deal to me but most of my customers don't even know what that is. Those that do use a FTP client that doesn't support SFTP. This is a thorn I would love to have removed.

As always, gratitude a plenty.
Randy:confused:

Oops, I almost forgot.
Redhat 9.0
ISPConfig 2.2.27
Installed using Perfect Server instructions from Falko

[till]

SFTP is a protocol that belongs to the SSH and not FTP server. So most likely the FTP server is not running.

Please post the output of:

netstat -tap | grep ftp

[savy2k]

[root@athena ~]# netstat -tap | grep ftp
tcp 0 0 *:ftp *:* LISTEN 8454/proftpd: (acce

I can ftp using the webFTP but not using a FTP client.

[till]

I can ftp using the webFTP but not using a FTP client.

Ok. This is a very good information as this means that there rea no issues with the FTP server. If webFTP works (which is a normal FTP client) but no external clients, then there is a firewall problem.

Please try to use active and passive FTP with the external FTP client.

[savy2k]

I looked all through my iptables and I pasted the only reference to FTP below.

PAROLE tcp -- anywhere anywhere tcp dpt:ftp

I don't know what it means by PAROLE.

Oh, BTW, I tried using passive mode but no luck

[savy2k]

Til, I was just thinking. It's not like I can't connect to the server using FTP I just can't authenticate. Geez, I'm sorry I should have mention that earlier. I don't know what I was thinking. That clearly changes everything. I assure you the last thing I want to do is waste your time.

Randy

[till]

Please try active and passive FTP.

[savy2k]

I just tried both active and passive mode and I get the same result with either one.

I don't understand why there is nothing in the FTP log. Shouldn't something show up somewhere from the attempts I have made to login?

[falko]

Maybe there's something in auth.log.
Also, I'd try to switch off the firewall for testing purposes.

[savy2k]

Well, I typed the following commands

# service iptables save
# service iptables stop
# chkconfig iptables off

I still wasn't able to login using Xproftp

:(

[till]

Which error messages do you get in the proftpd / vsftpd log or the messages log when you try to connect to FTP?

[savy2k]

The proftpd.log is empty. There is no vsftpd.log and in the messages log I get

Aug 2 18:11:42 Myserver proftpd[31354]: Myserver.domain.tld(::ffff:76.232.119.148[::ffff:76.232.119.148]) - FTP session opened.
Aug 2 18:11:42 Myserver proftpd[31354]: Myserver.domain.tld (::ffff:76.232.119.148[::ffff:76.232.119.148]) - no such user 'admin'
Aug 2 18:12:15 Myserver proftpd[31388]: Myserver.domain.tld (::ffff:76.232.119.148[::ffff:76.232.119.148]) - FTP session opened.

Connecting to: myserver.domain.tld
220 ProFTPD 1.3.1 Server (ProFTPD server) [::ffff:001.002.003.004]
331 Password required for admin
530 Login incorrect.
Connection Failed: myserver.domain.tld
Connecting to: myserver.domain.tld
220 ProFTPD 1.3.1 Server (ProFTPD server) [::ffff:001.002.003.004]
331 Password required for randy
530 Login incorrect.
Connection Failed: myserver.domain.tld

[falko]

Is admin a real system user account, or is it maybe your ISPConfig login? Maybe you mixed up ISPConfig users and system users?

[savy2k]

Well you are right, admin isn't a real system user account, but randy is and I can't login with that user either.

I was just thinking, I can FTP as admin if I use WebFTP

[till]

ISPConfig FTP users have normally a username prefix, so the username that you use for FTP is something like web22_admin and not just admin.

[savy2k]

I use web2_randy when I attempt to FTP using XProFTP.

[falko]

Did you enable FTP for web2?

[savy2k]

Yes, I did.