On 05/23/18 13:53, Todd Chester wrote:
Hi All,
After upgrading to FC 28 from FC 27, my customer's
vsftpd server stopped allowing ftp logins
from anywhere.
# systemctl status vsftpd
shows it running and happy (I tried stopping and
restarting several times)
There is no complaining in
# journalctl -f
when I attempt to make a connection.
I just get told something is wrong with the
username or password.
SELinux alerts are quiet.
What the heck ????
Well, I had an F27/Gnome VM to which I installed vsftp and tested it.
I then upgraded to F28 and it continues to work just fine.
I see this in the journal when I use a good un/pw.
May 23 18:50:08
f27gq.greshko.com audit[1585]: USER_ACCT pid=1585 uid=0
auid=4294967295 ses=4294967295 subj=system_u:system_r:ftpd_t:s0-s0:c0.c1023
msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="egreshko"
exe="/usr/sbin/vsftpd" hostname=::ffff:192.168.1.18 addr=::ffff:192.168.1.18
terminal=ftp res=success'
May 23 18:50:08
f27gq.greshko.com audit[1585]: CRED_ACQ pid=1585 uid=0
auid=4294967295 ses=4294967295 subj=system_u:system_r:ftpd_t:s0-s0:c0.c1023
msg='op=PAM:setcred grantors=pam_listfile,pam_shells,pam_unix
acct="egreshko"
exe="/usr/sbin/vsftpd" hostname=::ffff:192.168.1.18 addr=::ffff:192.168.1.18
terminal=ftp res=success'
And this when I give a bad un/pw.
May 23 18:49:34
f27gq.greshko.com vsftpd[1580]: pam_unix(vsftpd:auth): authentication
failure; logname= uid=0 euid=0 tty=ftp ruser=myang rhost=::ffff:192.168.1.18
May 23 18:50:08
f27gq.greshko.com audit[1585]: USER_AUTH pid=1585 uid=0
auid=4294967295 ses=4294967295 subj=system_u:system_r:ftpd_t:s0-s0:c0.c1023
msg='op=PAM:authentication grantors=pam_listfile,pam_shells,pam_unix
acct="egreshko"
exe="/usr/sbin/vsftpd" hostname=::ffff:192.168.1.18 addr=::ffff:192.168.1.18
terminal=ftp res=success'
Are you saying you don't even see these sorts of messages?
-T
_______________________________________________
users mailing list -- users(a)lists.fedoraproject.org
To unsubscribe send an email to users-leave(a)lists.fedoraproject.org
Fedora Code of Conduct:
https://getfedora.org/code-of-conduct.html
List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.o...
--
Conjecture is just a conclusion based on incomplete information. It isn't a fact.