can only login via ssh or ftp as root

colm_c

My linux skills are a little rusty and I'm trying to setup a standard ftp user.

I've install vsftpd, added a user called ftpuser in a group called ftpuser with a simple password.

Setup their home/default directory just outside the htdocs directory, and given them ownership of the directory.

But I'm just getting permission denied when I enter the password for both ssh and ftp access for the new user.

Is there anything else I need to do?

This is doing my head in!

sicruise

FTP and SSH generally use the unix users...

Did you create a user in the application or using adduser?

Cake Fiend

Can you log in as 'nobody'? Try setting a password for that user (assuming it exists).

Make sure you have 'local_enable' set to 'YES' for regular local users to be able to login (and of course set 'anonymous_enable' to 'NO').

For safety, I'd recommend chrooting the login: set 'chroot_local_user' to 'YES'.

colm_c

I used adduser command while sshing into the box as root.

For local_enable I assume your talking about the config file for vsftpd... That's done already.

Do I need give a user permission in some file to login via ssh?

Cake Fiend

colm_c wrote:

Do I need give a user permission in some file to login via ssh?

Not that I remember, can you login as root OK?

Edit: I'm a moron, never mind...

generalmiaow

the initial vsftpd settings are very restrictive, could you post your vsftpd.conf or part of it so we can compare? or what error mesage do you get trying to log in? vsftpd does use the unix accounts. make sure they have a home directory if you are allowing them to login to vsftpd, I get an error if I try to ftp in and there's nowhere for me to go.

[edit: now I'm a moron, you already said the user has a homedir] (note: you say their homedir is just outside the htdocs folder, do you mean they have homedirs as /var/ftpuser ? try giving them /home/ftpuser , maybe having a homedir in /var is problematics.

colm_c

I've created a uer with the standard home directory and one with the directory of just outside the htdocs/www directory and still the same issue.

Is there anything in SELinux that I need to change to allow people to login? It seems to be setup on this box, and I've checked the last box I worked on that users could login with ssh and ftp and it doesn't have it installed... so maybe?

Any ideas what config I need to change?

generalmiaow

well, there is /etc/ssh/sshd_config - but seen as you seem to have set vsftpd.conf correctly, it doesn't seem to be a separate problem for each. what is the exact error message, is it "Permission denied (publickey,password)." such as you get when you enter an incorrect username 3 times?