On 05/23/18 13:53, Todd Chester wrote: > Hi All, > > After upgrading to FC 28 from FC 27, my customer's > vsftpd server stopped allowing ftp logins > from anywhere. > > # systemctl status vsftpd > > shows it running and happy (I tried stopping and > restarting several times) > > There is no complaining in > > # journalctl -f > > when I attempt to make a connection. > > I just get told something is wrong with the > username or password. > > SELinux alerts are quiet. > > What the heck ???? Well, I had an F27/Gnome VM to which I installed vsftp and tested it. I then upgraded to F28 and it continues to work just fine. I see this in the journal when I use a good un/pw. May 23 18:50:08 f27gq.greshko.com audit[1585]: USER_ACCT pid=1585 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:ftpd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="egreshko" exe="/usr/sbin/vsftpd" hostname=::ffff:192.168.1.18 addr=::ffff:192.168.1.18 terminal=ftp res=success' May 23 18:50:08 f27gq.greshko.com audit[1585]: CRED_ACQ pid=1585 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:ftpd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_listfile,pam_shells,pam_unix acct="egreshko" exe="/usr/sbin/vsftpd" hostname=::ffff:192.168.1.18 addr=::ffff:192.168.1.18 terminal=ftp res=success' And this when I give a bad un/pw. May 23 18:49:34 f27gq.greshko.com vsftpd[1580]: pam_unix(vsftpd:auth): authentication failure; logname= uid=0 euid=0 tty=ftp ruser=myang rhost=::ffff:192.168.1.18 May 23 18:50:08 f27gq.greshko.com audit[1585]: USER_AUTH pid=1585 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:ftpd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=pam_listfile,pam_shells,pam_unix acct="egreshko" exe="/usr/sbin/vsftpd" hostname=::ffff:192.168.1.18 addr=::ffff:192.168.1.18 terminal=ftp res=success' Are you saying you don't even see these sorts of messages? > > -T > _______________________________________________ > users mailing list -- users@xxxxxxxxxxxxxxxxxxxxxxx > To unsubscribe send an email to users-leave@xxxxxxxxxxxxxxxxxxxxxxx > Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines > List Archives: > https://lists.fedoraproject.org/archives/list/users@xxxxxxxxxxxxxxxxxxxxxxx/message/DMGC3Y7LC2KK5WWUPTK2YOBFGC54IKZK/ -- Conjecture is just a conclusion based on incomplete information. It isn't a fact.
Attachment:
signature.asc
Description: OpenPGP digital signature
_______________________________________________ users mailing list -- users@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to users-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/users@xxxxxxxxxxxxxxxxxxxxxxx/message/OA362EC2YZCMVNMVCC5CZE27JXFH3LU7/
