Package: vsftpd
Version: 2.3.5-3
Severity: important
Dear Maintainer,
*** Please consider answering these questions, where appropriate ***
* What led up to the situation?
Configuring ftp server.
* What exactly did you do (or not do) that was effective (or
ineffective)?
1. Installed vsftp from repo.
2. Configured /etc/vsftpd.conf
* What was the outcome of this action?
FTP to localhost fails from localhost itself.
suren@surendhar:~$ ftp localhost
ftp: connect to address ::1: Connection refused
Trying 127.0.0.1...
Connected to localhost.
421 Service not available, remote server has closed connection
vsftpd process seems to be running
suren@surendhar:~$ ps -aux | grep vsftpd
warning: bad ps syntax, perhaps a bogus '-'?
See http://gitorious.org/procps/procps/blobs/master/Documentation/FAQ
root 27949 0.0 0.1 4984 1416 ? S 00:06 0:00
/usr/sbin/vsftpd
root 27954 0.0 0.0 4984 464 ? S 00:07 0:00
/usr/sbin/vsftpd
suren 28045 0.0 0.0 2144 712 pts/0 S+ 00:14 0:00 sh -c
/usr/bin/sensible-editor '/tmp/reportbug-vsftpd-20140218-27975-mlp7oV'
suren 28046 0.0 0.0 2144 736 pts/0 S+ 00:14 0:00 /bin/sh
/usr/bin/sensible-editor /tmp/reportbug-vsftpd-20140218-27975-mlp7oV
suren 28047 0.0 0.1 3184 1744 pts/0 S+ 00:14 0:00 editor
/tmp/reportbug-vsftpd-20140218-27975-mlp7oV
root 28064 0.0 0.0 4984 464 ? S 00:19 0:00
/usr/sbin/vsftpd
suren 28066 0.0 0.0 2296 840 pts/1 S+ 00:20 0:00 grep vsftpd
Netstat show vsftpd is listening
suren@surendhar:~$ sudo netstat -tulnp | grep 21
tcp 0 0 0.0.0.0:21 0.0.0.0:* LISTEN
27949/vsftpd
This is my iptables config
suren@surendhar:~$ sudo iptables -L
Chain INPUT (policy ACCEPT)
target prot opt source destination
Chain FORWARD (policy ACCEPT)
target prot opt source destination
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
I found the pointer to pam key was missing in the original configuration
file. So I added the following lines.
# This option specifies the location of the RSA key to use for SSL
# encrypted connections.
rsa_private_key_file=/etc/ssl/private/ssl-cert-snakeoil.key
#tcp_wrappers=YES
log_ftp_protocol=YES
* What outcome did you expect instead?
ftp to localhost should succeed.
*** End of the template - remove these lines ***
-- System Information:
Debian Release: 7.3
APT prefers stable-updates
APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: sparc (sparc64)
Kernel: Linux 3.2.0-4-sparc64
Locale: LANG=en_US.UTF-8, LC_CTYPE=UTF-8 (charmap=ANSI_X3.4-1968) (ignored:
LC_ALL set to C)
Shell: /bin/sh linked to /bin/dash
Versions of packages vsftpd depends on:
ii adduser 3.113+nmu3
ii debconf [debconf-2.0] 1.5.49
ii libc6 2.13-38
ii libcap2 1:2.22-1.2
ii libpam-modules 1.1.3-7.1
ii libpam0g 1.1.3-7.1
ii libssl1.0.0 1.0.1e-2
ii libwrap0 7.6.q-24
ii netbase 5.0
Versions of packages vsftpd recommends:
ii logrotate 3.8.1-4
vsftpd suggests no packages.
-- Configuration Files:
/etc/vsftpd.conf changed:
listen=YES
anonymous_enable=NO
local_enable=YES
write_enable=YES
dirmessage_enable=YES
use_localtime=YES
xferlog_enable=YES
connect_from_port_20=YES
secure_chroot_dir=/var/run/vsftpd/empty
pam_service_name=vsftpd
rsa_cert_file=/etc/ssl/private/vsftpd.pem
rsa_private_key_file=/etc/ssl/private/ssl-cert-snakeoil.key
log_ftp_protocol=YES
-- debconf information:
vsftpd/directory: /srv/ftp
vsftpd/username: ftp
--
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]