anonymous login allowed on vsftpd, local login not allowed

[coyoteboy]

I'm having this problem with vsftp and proftp, I followed this whole thread through and tried the lot - no luck. But I did find I could ftp in from the local network but as soon as I tried to go through my external IP address (from the same client) it ALWAYS gives 530 across a range of accounts. I have SE disabled and firewall open on ftp ports.
If I try to log in from OUTSIDE (via my web address) the network I get this in the /var/log/secure:
____________________________________________
Sep 16 16:16:06 Server proftpd: Deprecated pam_stack module called from service "proftpd"
Sep 16 16:16:06 Server proftpd: pam_env(proftpd:setcred): Unable to open config file: /etc/security/pam_env.conf: No such file or directory
Sep 16 16:16:06 Server proftpd[7784]: Server (::ffff:192.168.1.66[::ffff:192.168.1.66]) - PAM(setcred): System error
Sep 16 16:16:06 Server proftpd: Deprecated pam_stack module called from service "proftpd"
Sep 16 16:16:06 Server proftpd: pam_unix(proftpd:session): session closed for user pichost
Sep 16 16:16:06 Server proftpd[7784]: Server (::ffff:192.168.1.66[::ffff:192.168.1.66]) - PAM(close_session): System error
Sep 16 16:16:06 Server proftpd[7784]: Server (::ffff:192.168.1.66[::ffff:192.168.1.66]) - FTP session closed.
________________________________________________

Whereas if I log in through my servers internal host name/ip address I get messages of login successful, although moans that IPV6 isnts right, but it seems to carry on regardless.

[marisdembovskis]

Ok.
Selinux is on, Firewall is on.
But in Selinux Troubleshooter it said, that it is blocking access to /home.
so I did:
setsebool -P ftp_home_dir=1

[marisdembovskis]

SOLVED.
i SPENT 1 month testing gathering, but in the end there was problem with router, which forwards ftp to my ftp server and another guy was responsible for that. So only today we solved FTp problem and decided to use proftpd.
Our firewall is ON, Selinux is ON. Everything works perfect.

the good idea if you want to test ftp server is to via terminal on ftp server do:
ftp
open
localhost
#give user anonymous#
anonymous
#Enter


and if you are in FTp server is fine.


no do that from outside
ftp
open
19.2.2.2
#give anonymous username
anonymous
Enter

If it fails, problem with firewall, router, Selinux
If it works, You are Genius.
Try 3 times and if it still works, you can grab some good movie and relax for a 2 hours.

[coyoteboy]

Well I tried this this morning:

From on server - logged in fine
From on internal system to "server" - worked
From internal system to external IP - logged in, wont get directory listing. Arrggggg!

[saphyrre]

Hi all

I read all the posts in the forum, and i had exactly the same issue. Was able to log anonymous but my local user login would always fail. After reinstalling vsftpd a few times and spending a couple hours searching the net i got nothing. I thought it was an issue with pam, or with db... and while i was reading the "official" documentation, it hit me.

It must have hit me pretty good, because my ftp server is working again... basically, with virtual users, everything depends on the "guest_username=xxxx" ; just put in there a valid username (not a new one; make sure it's not in the ftpuser or user_list) that has full access the folders you want to share and that's it.
Or put in there "guest_username=root" just for the heck of it (don't start flaming, this is just for troubleshooting purposes) and see what happens.

Anyway, it's a chroot "thang"...your vsftpd "guest" does not have correct permissions.

Hope this helps.