[Proftpd-user] MOD_SFTP failing first upload attempt
Cosmin Neagu via Proftp-user <[email protected]> Thu, 23 Jun 2022 16:12:46 +0300
| Newsgroups | gmane.network.proftpd.user |
|---|---|
| Message-ID | <CAA8U1-8+Q2By9LwkL7MrZ0LegTf+A4vHSZW+XT6cm=X1fk=79A@mail.gmail.com> |
Hi Guys I'm having a weird issue when trying to use sftp with proftpd. I authenticate and try to upload a file, but on the first attempt I get "Permission denied" and the file is created with 0 Bytes. On the second attempt, the file is successfully uploaded over the empty one that is already there. I run multiple tests, and the only way to have the file successfully uploaded is to have the file already present on SFTP server. I don't have this problem if I use another FTP client (like filezilla), only with sftp (on ubuntu). Enabled debug -d 10 on the server, but I see nothing relevant that would explain why sftp client cannot upload the file the first time - why it is saying "Permission denied". I've put below the logs and my settings and my config file for proftpd, hope someone can help me, or at least point me in the right direction (what debugs can I run?) nagios@ip-172-18-249-20:~$ sftp [email protected] [email protected]'s password: Connected to 13.51.2.224. sftp> put check_nrpe.log Uploading check_nrpe.log to /check_nrpe.log remote open("/check_nrpe.log"): Permission denied sftp> put check_nrpe.log Uploading check_nrpe.log to /check_nrpe.log check_nrpe.log 100% 931 1.7MB/s 00:00 sftp> exit SFTPExtended logs: 2022-06-23 12:42:56.214 YrRf0KwSgIANMPNaAACzJ1E3 13.48.243.90 24608 - "USER cosmin" 331 Password required for cosmin -bytes -sec - - ssh2 2022-06-23 12:43:00.835 YrRf0KwSgIANMPNaAACzJ1E3 13.48.243.90 24608 - "USER cosmin" 331 Password required for cosmin -bytes -sec - - ssh2 2022-06-23 12:43:00.848 YrRf0KwSgIANMPNaAACzJ1E3 13.48.243.90 24608 cosmin "PASS (hidden)" 230 User cosmin logged in -bytes -sec - - ssh2 Daemon logs with debug 10: ubuntu@FTP-PROD1:/opt/proftpd-sftp/etc$ sudo /opt/proftpd-sftp/sbin/proftpd -4 -n -d 10 -c /opt/proftpd-sftp/etc/proftpd.conf 2022-06-23 12:42:47,038 FTP-PROD1 proftpd[45861]: using TCP receive buffer size of 131072 bytes 2022-06-23 12:42:47,038 FTP-PROD1 proftpd[45861]: using TCP send buffer size of 16384 bytes 2022-06-23 12:42:47,038 FTP-PROD1 proftpd[45861]: mod_sftp/1.0.1: using OpenSSL 1.1.1f 31 Mar 2020 2022-06-23 12:42:47,038 FTP-PROD1 proftpd[45861]: disabling runtime support for IPv6 connections 2022-06-23 12:42:47,039 FTP-PROD1 proftpd[45861]: retrieved UID 65534 for user 'nobody' 2022-06-23 12:42:47,039 FTP-PROD1 proftpd[45861]: retrieved GID 65534 for group 'nogroup' 2022-06-23 12:42:47,039 FTP-PROD1 proftpd[45861]: <IfModule>: using 'mod_unique_id.c' section at line 75 2022-06-23 12:42:47,039 FTP-PROD1 proftpd[45861]: <IfModule>: using 'mod_sftp.c' section at line 83 2022-06-23 12:42:47,039 FTP-PROD1 proftpd[45861]: ROOT PRIVS at mod_sftp.c:1197 2022-06-23 12:42:47,039 FTP-PROD1 proftpd[45861]: RELINQUISH PRIVS at mod_sftp.c:1200 2022-06-23 12:42:47,039 FTP-PROD1 proftpd[45861]: ROOT PRIVS at mod_sftp.c:1197 2022-06-23 12:42:47,039 FTP-PROD1 proftpd[45861]: RELINQUISH PRIVS at mod_sftp.c:1200 2022-06-23 12:42:47,039 FTP-PROD1 proftpd[45861]: UseReverseDNS off, returning IP address instead of DNS name 2022-06-23 12:42:47,039 FTP-PROD1 proftpd[45861] 172.18.128.128: 2022-06-23 12:42:47,039 FTP-PROD1 proftpd[45861] 172.18.128.128: Config for Azets File Transfer Server: 2022-06-23 12:42:47,039 FTP-PROD1 proftpd[45861] 172.18.128.128: Limit 2022-06-23 12:42:47,039 FTP-PROD1 proftpd[45861] 172.18.128.128: DenyAll 2022-06-23 12:42:47,039 FTP-PROD1 proftpd[45861] 172.18.128.128: DisplayConnect 2022-06-23 12:42:47,039 FTP-PROD1 proftpd[45861] 172.18.128.128: DisplayQuit 2022-06-23 12:42:47,039 FTP-PROD1 proftpd[45861] 172.18.128.128: DisplayLogin 2022-06-23 12:42:47,039 FTP-PROD1 proftpd[45861] 172.18.128.128: ServerIdent 2022-06-23 12:42:47,039 FTP-PROD1 proftpd[45861] 172.18.128.128: MaxClients 2022-06-23 12:42:47,039 FTP-PROD1 proftpd[45861] 172.18.128.128: MaxClientsPerHost 2022-06-23 12:42:47,039 FTP-PROD1 proftpd[45861] 172.18.128.128: MaxClientsPerUser 2022-06-23 12:42:47,039 FTP-PROD1 proftpd[45861] 172.18.128.128: MaxLoginAttempts 2022-06-23 12:42:47,040 FTP-PROD1 proftpd[45861] 172.18.128.128: TimeoutLogin 2022-06-23 12:42:47,040 FTP-PROD1 proftpd[45861] 172.18.128.128: TimeoutIdle 2022-06-23 12:42:47,040 FTP-PROD1 proftpd[45861] 172.18.128.128: TimeoutNoTransfer 2022-06-23 12:42:47,040 FTP-PROD1 proftpd[45861] 172.18.128.128: TimeoutStalled 2022-06-23 12:42:47,040 FTP-PROD1 proftpd[45861] 172.18.128.128: DefaultServer 2022-06-23 12:42:47,040 FTP-PROD1 proftpd[45861] 172.18.128.128: Umask 2022-06-23 12:42:47,040 FTP-PROD1 proftpd[45861] 172.18.128.128: DirUmask 2022-06-23 12:42:47,040 FTP-PROD1 proftpd[45861] 172.18.128.128: UserID 2022-06-23 12:42:47,040 FTP-PROD1 proftpd[45861] 172.18.128.128: UserName 2022-06-23 12:42:47,040 FTP-PROD1 proftpd[45861] 172.18.128.128: GroupID 2022-06-23 12:42:47,040 FTP-PROD1 proftpd[45861] 172.18.128.128: GroupName 2022-06-23 12:42:47,040 FTP-PROD1 proftpd[45861] 172.18.128.128: DefaultRoot 2022-06-23 12:42:47,040 FTP-PROD1 proftpd[45861] 172.18.128.128: AllowOverwrite 2022-06-23 12:42:47,040 FTP-PROD1 proftpd[45861] 172.18.128.128: AuthOrder 2022-06-23 12:42:47,040 FTP-PROD1 proftpd[45861] 172.18.128.128: SQLAuthenticate 2022-06-23 12:42:47,040 FTP-PROD1 proftpd[45861] 172.18.128.128: SQLConnectInfo 2022-06-23 12:42:47,040 FTP-PROD1 proftpd[45861] 172.18.128.128: SQLUserTable 2022-06-23 12:42:47,040 FTP-PROD1 proftpd[45861] 172.18.128.128: SQLUsernameField 2022-06-23 12:42:47,040 FTP-PROD1 proftpd[45861] 172.18.128.128: SQLPasswordField 2022-06-23 12:42:47,040 FTP-PROD1 proftpd[45861] 172.18.128.128: SQLUidField 2022-06-23 12:42:47,040 FTP-PROD1 proftpd[45861] 172.18.128.128: SQLGidField 2022-06-23 12:42:47,040 FTP-PROD1 proftpd[45861] 172.18.128.128: SQLHomedirField 2022-06-23 12:42:47,040 FTP-PROD1 proftpd[45861] 172.18.128.128: SQLUserWhereClause 2022-06-23 12:42:47,040 FTP-PROD1 proftpd[45861] 172.18.128.128: SQLAuthTypes 2022-06-23 12:42:47,040 FTP-PROD1 proftpd[45861] 172.18.128.128: SQLMinID 2022-06-23 12:42:47,040 FTP-PROD1 proftpd[45861] 172.18.128.128: SQLDefaultGID 2022-06-23 12:42:47,040 FTP-PROD1 proftpd[45861] 172.18.128.128: SQLLog_PASS 2022-06-23 12:42:47,040 FTP-PROD1 proftpd[45861] 172.18.128.128: SQLNamedQuery_updatecount 2022-06-23 12:42:47,040 FTP-PROD1 proftpd[45861] 172.18.128.128: CreateHome 2022-06-23 12:42:47,040 FTP-PROD1 proftpd[45861] 172.18.128.128: LogFormat 2022-06-23 12:42:47,040 FTP-PROD1 proftpd[45861] 172.18.128.128: ExtendedLog 2022-06-23 12:42:47,040 FTP-PROD1 proftpd[45861] 172.18.128.128: SFTPEngine 2022-06-23 12:42:47,040 FTP-PROD1 proftpd[45861] 172.18.128.128: SFTPHostKey 2022-06-23 12:42:47,040 FTP-PROD1 proftpd[45861] 172.18.128.128: SFTPHostKey 2022-06-23 12:42:47,040 FTP-PROD1 proftpd[45861] 172.18.128.128: SFTPAuthorizedUserKeys 2022-06-23 12:42:47,041 FTP-PROD1 proftpd[45861] 172.18.128.128: ROOT PRIVS at keys.c:799 2022-06-23 12:42:47,041 FTP-PROD1 proftpd[45861] 172.18.128.128: RELINQUISH PRIVS at keys.c:802 2022-06-23 12:42:47,041 FTP-PROD1 proftpd[45861] 172.18.128.128: ROOT PRIVS at keys.c:799 2022-06-23 12:42:47,041 FTP-PROD1 proftpd[45861] 172.18.128.128: RELINQUISH PRIVS at keys.c:802 2022-06-23 12:42:47,041 FTP-PROD1 proftpd[45861] 172.18.128.128: ROOT PRIVS at mod_rlimit.c:555 2022-06-23 12:42:47,041 FTP-PROD1 proftpd[45861] 172.18.128.128: RELINQUISH PRIVS at mod_rlimit.c:558 2022-06-23 12:42:47,041 FTP-PROD1 proftpd[45861] 172.18.128.128: set core resource limits for daemon 2022-06-23 12:42:47,041 FTP-PROD1 proftpd[45861] 172.18.128.128: ignoring supplemental groups for non-root UID 65534 2022-06-23 12:42:47,041 FTP-PROD1 proftpd[45861] 172.18.128.128: SETUP PRIVS at main.c:2619 2022-06-23 12:42:47,041 FTP-PROD1 proftpd[45861] 172.18.128.128: ROOT PRIVS at main.c:1897 2022-06-23 12:42:47,042 FTP-PROD1 proftpd[45861] 172.18.128.128: opening scoreboard '/opt/proftpd-sftp/var/proftpd.scoreboard' 2022-06-23 12:42:47,042 FTP-PROD1 proftpd[45861] 172.18.128.128: RELINQUISH PRIVS at main.c:1924 2022-06-23 12:42:47,042 FTP-PROD1 proftpd[45861] 172.18.128.128: ROOT PRIVS at inet.c:432 2022-06-23 12:42:47,042 FTP-PROD1 proftpd[45861] 172.18.128.128: RELINQUISH PRIVS at inet.c:515 2022-06-23 12:42:47,042 FTP-PROD1 proftpd[45861] 172.18.128.128: ProFTPD 1.3.7d (maint) (built Wed Jun 15 2022 10:05:45 UTC) standalone mode STARTUP 2022-06-23 12:42:47,042 FTP-PROD1 proftpd[45861] 172.18.128.128: ROOT PRIVS at pidfile.c:56 2022-06-23 12:42:47,042 FTP-PROD1 proftpd[45861] 172.18.128.128: RELINQUISH PRIVS at pidfile.c:59 2022-06-23 12:42:47,042 FTP-PROD1 proftpd[45861] 172.18.128.128: ROOT PRIVS at pidfile.c:67 2022-06-23 12:42:47,042 FTP-PROD1 proftpd[45861] 172.18.128.128: RELINQUISH PRIVS at pidfile.c:70 2022-06-23 12:42:56,207 FTP-PROD1 proftpd[45863] 172.18.128.128: ROOT PRIVS at main.c:1291 2022-06-23 12:42:56,207 FTP-PROD1 proftpd[45863] 172.18.128.128: RELINQUISH PRIVS at main.c:1295 2022-06-23 12:42:56,207 FTP-PROD1 proftpd[45863] 172.18.128.128: no matching vhost found for 172.18.128.128#22, using 'Azets File Transfer Server' listening on wildcard address 2022-06-23 12:42:56,207 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): ROOT PRIVS at main.c:1100 2022-06-23 12:42:56,207 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): SETUP PRIVS at main.c:1105 2022-06-23 12:42:56,207 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): session requested from client in unknown class 2022-06-23 12:42:56,207 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): performing module session initializations 2022-06-23 12:42:56,207 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): mod_unique_id/0.2: generating unique session ID 2022-06-23 12:42:56,207 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): mod_unique_id/0.2: unique session ID is 'YrRf0KwSgIANMPNaAACzJ1E3' 2022-06-23 12:42:56,207 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): ROOT PRIVS at keys.c:3424 2022-06-23 12:42:56,207 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): RELINQUISH PRIVS at keys.c:3431 2022-06-23 12:42:56,208 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): ROOT PRIVS at keys.c:1008 2022-06-23 12:42:56,208 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): RELINQUISH PRIVS at keys.c:1015 2022-06-23 12:42:56,208 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): ROOT PRIVS at keys.c:1008 2022-06-23 12:42:56,208 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): RELINQUISH PRIVS at keys.c:1015 2022-06-23 12:42:56,208 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): ROOT PRIVS at keys.c:3424 2022-06-23 12:42:56,208 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): RELINQUISH PRIVS at keys.c:3431 2022-06-23 12:42:56,208 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): mod_sql/4.5: defaulting to 'mysql' backend 2022-06-23 12:42:56,208 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): mod_delay/0.7: no DelayOnEvent rules configured with "DelayTable none" in effect, disabling module 2022-06-23 12:42:56,208 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): mod_log: opening ExtendedLog '/var/log/proftpd/sftp-extended.log' 2022-06-23 12:42:56,208 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): ROOT PRIVS at mod_log.c:1285 2022-06-23 12:42:56,208 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): RELINQUISH PRIVS at mod_log.c:1288 2022-06-23 12:42:56,208 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): ROOT PRIVS at mod_auth.c:215 2022-06-23 12:42:56,208 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): opening scoreboard '/opt/proftpd-sftp/var/proftpd.scoreboard' 2022-06-23 12:42:56,208 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): RELINQUISH PRIVS at mod_auth.c:217 2022-06-23 12:42:56,208 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): AuthOrder in effect, resetting auth module order 2022-06-23 12:42:56,209 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): connected - local : 172.18.128.128:22 2022-06-23 12:42:56,209 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): connected - remote : 13.48.243.90:24608 2022-06-23 12:42:56,209 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): SSH2 session opened. 2022-06-23 12:42:56,211 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): dispatching LOG_CMD command 'KEXINIT' to mod_sql 2022-06-23 12:42:56,211 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): dispatching LOG_CMD command 'KEXINIT' to mod_log 2022-06-23 12:42:56,211 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): dispatching LOG_CMD command 'ECDH_INIT' to mod_sql 2022-06-23 12:42:56,211 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): dispatching LOG_CMD command 'ECDH_INIT' to mod_log 2022-06-23 12:42:56,213 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): dispatching LOG_CMD command 'NEWKEYS' to mod_sql 2022-06-23 12:42:56,213 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): dispatching LOG_CMD command 'NEWKEYS' to mod_log 2022-06-23 12:42:56,213 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): dispatching LOG_CMD command 'EXT_INFO' to mod_sql 2022-06-23 12:42:56,213 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): dispatching LOG_CMD command 'EXT_INFO' to mod_log 2022-06-23 12:42:56,213 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): dispatching LOG_CMD command 'SERVICE_REQUEST' to mod_sql 2022-06-23 12:42:56,213 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): dispatching LOG_CMD command 'SERVICE_REQUEST' to mod_log 2022-06-23 12:42:56,214 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): dispatching PRE_CMD command 'USER cosmin' to mod_core 2022-06-23 12:42:56,214 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): dispatching PRE_CMD command 'USER cosmin' to mod_core 2022-06-23 12:42:56,214 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): dispatching PRE_CMD command 'USER cosmin' to mod_delay 2022-06-23 12:42:56,214 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): dispatching PRE_CMD command 'USER cosmin' to mod_auth 2022-06-23 12:42:56,214 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): dispatching POST_CMD command 'USER cosmin' to mod_sql 2022-06-23 12:42:56,214 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): dispatching POST_CMD command 'USER cosmin' to mod_delay 2022-06-23 12:42:56,214 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): dispatching LOG_CMD command 'USER cosmin' to mod_sql 2022-06-23 12:42:56,214 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): dispatching LOG_CMD command 'USER cosmin' to mod_log 2022-06-23 12:42:56,214 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): dispatching LOG_CMD command 'USER cosmin' to mod_delay 2022-06-23 12:42:56,214 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): dispatching POST_CMD command 'USERAUTH_REQUEST cosmin none' to mod_sql 2022-06-23 12:42:56,214 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): dispatching LOG_CMD command 'USERAUTH_REQUEST cosmin none' to mod_sql 2022-06-23 12:42:56,214 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): dispatching LOG_CMD command 'USERAUTH_REQUEST cosmin none' to mod_log 2022-06-23 12:43:00,834 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): dispatching PRE_CMD command 'USER cosmin' to mod_core 2022-06-23 12:43:00,834 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): dispatching PRE_CMD command 'USER cosmin' to mod_core 2022-06-23 12:43:00,834 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): dispatching PRE_CMD command 'USER cosmin' to mod_delay 2022-06-23 12:43:00,834 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): dispatching PRE_CMD command 'USER cosmin' to mod_auth 2022-06-23 12:43:00,834 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): dispatching POST_CMD command 'USER cosmin' to mod_sql 2022-06-23 12:43:00,835 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): dispatching POST_CMD command 'USER cosmin' to mod_delay 2022-06-23 12:43:00,835 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): dispatching LOG_CMD command 'USER cosmin' to mod_sql 2022-06-23 12:43:00,835 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): dispatching LOG_CMD command 'USER cosmin' to mod_log 2022-06-23 12:43:00,835 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): dispatching LOG_CMD command 'USER cosmin' to mod_delay 2022-06-23 12:43:00,835 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): dispatching PRE_CMD command 'PASS (hidden)' to mod_core 2022-06-23 12:43:00,835 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): dispatching PRE_CMD command 'PASS (hidden)' to mod_core 2022-06-23 12:43:00,835 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): dispatching PRE_CMD command 'PASS (hidden)' to mod_sql 2022-06-23 12:43:00,835 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): dispatching PRE_CMD command 'PASS (hidden)' to mod_delay 2022-06-23 12:43:00,835 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): dispatching PRE_CMD command 'PASS (hidden)' to mod_auth 2022-06-23 12:43:00,841 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): retrieved UID 2001 for user 'cosmin' 2022-06-23 12:43:00,842 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): retrieved UID 2001 for user 'cosmin' 2022-06-23 12:43:00,842 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): ROOT PRIVS at auth.c:1815 2022-06-23 12:43:00,842 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): RELINQUISH PRIVS at auth.c:1818 2022-06-23 12:43:00,842 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): USER PRIVS 2001 at auth.c:397 2022-06-23 12:43:00,843 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): RELINQUISH PRIVS at auth.c:399 2022-06-23 12:43:00,843 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): ROOT PRIVS at mkhome.c:324 2022-06-23 12:43:00,843 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): RELINQUISH PRIVS at mkhome.c:369 2022-06-23 12:43:00,843 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): 2022-06-23 12:43:00,843 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): Config for Azets File Transfer Server: 2022-06-23 12:43:00,843 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): Limit 2022-06-23 12:43:00,843 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): DenyAll 2022-06-23 12:43:00,843 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): DisplayConnect 2022-06-23 12:43:00,843 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): DisplayQuit 2022-06-23 12:43:00,843 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): DisplayLogin 2022-06-23 12:43:00,843 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): ServerIdent 2022-06-23 12:43:00,843 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): MaxClients 2022-06-23 12:43:00,843 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): MaxClientsPerHost 2022-06-23 12:43:00,843 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): MaxClientsPerUser 2022-06-23 12:43:00,843 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): MaxLoginAttempts 2022-06-23 12:43:00,843 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): TimeoutLogin 2022-06-23 12:43:00,843 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): TimeoutIdle 2022-06-23 12:43:00,843 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): TimeoutNoTransfer 2022-06-23 12:43:00,843 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): TimeoutStalled 2022-06-23 12:43:00,843 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): DefaultServer 2022-06-23 12:43:00,843 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): Umask 2022-06-23 12:43:00,843 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): DirUmask 2022-06-23 12:43:00,843 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): UserID 2022-06-23 12:43:00,843 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): UserName 2022-06-23 12:43:00,843 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): GroupID 2022-06-23 12:43:00,843 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): GroupName 2022-06-23 12:43:00,843 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): DefaultRoot 2022-06-23 12:43:00,843 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): AllowOverwrite 2022-06-23 12:43:00,843 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): AuthOrder 2022-06-23 12:43:00,843 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): SQLAuthenticate 2022-06-23 12:43:00,843 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): SQLConnectInfo 2022-06-23 12:43:00,843 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): SQLUserTable 2022-06-23 12:43:00,843 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): SQLUsernameField 2022-06-23 12:43:00,843 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): SQLPasswordField 2022-06-23 12:43:00,843 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): SQLUidField 2022-06-23 12:43:00,843 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): SQLGidField 2022-06-23 12:43:00,843 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): SQLHomedirField 2022-06-23 12:43:00,843 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): SQLUserWhereClause 2022-06-23 12:43:00,843 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): SQLAuthTypes 2022-06-23 12:43:00,843 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): SQLMinID 2022-06-23 12:43:00,843 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): SQLDefaultGID 2022-06-23 12:43:00,843 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): SQLLog_PASS 2022-06-23 12:43:00,843 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): SQLNamedQuery_updatecount 2022-06-23 12:43:00,843 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): CreateHome 2022-06-23 12:43:00,843 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): LogFormat 2022-06-23 12:43:00,843 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): ExtendedLog 2022-06-23 12:43:00,843 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): SFTPEngine 2022-06-23 12:43:00,843 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): SFTPHostKey 2022-06-23 12:43:00,843 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): SFTPHostKey 2022-06-23 12:43:00,843 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): SFTPAuthorizedUserKeys 2022-06-23 12:43:00,843 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): ROOT PRIVS at auth.c:466 2022-06-23 12:43:00,843 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): opening TransferLog '/var/log/xferlog' 2022-06-23 12:43:00,843 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): RELINQUISH PRIVS at auth.c:505 2022-06-23 12:43:00,843 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): USER PRIVS 2001 at auth.c:163 2022-06-23 12:43:00,843 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): retrieved UID 2001 for user 'cosmin' 2022-06-23 12:43:00,843 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): RELINQUISH PRIVS at auth.c:168 2022-06-23 12:43:00,843 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): set TZ environment variable to 'UTC' 2022-06-23 12:43:00,843 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): Preparing to chroot to directory '/FTP/cosmin' 2022-06-23 12:43:00,843 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): ROOT PRIVS at auth.c:1953 2022-06-23 12:43:00,843 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): RELINQUISH PRIVS at auth.c:1956 2022-06-23 12:43:00,843 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): Environment successfully chroot()ed 2022-06-23 12:43:00,843 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): ROOT PRIVS at auth.c:539 2022-06-23 12:43:00,844 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): SETUP PRIVS at auth.c:540 2022-06-23 12:43:00,844 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): ROOT PRIVS at auth.c:566 2022-06-23 12:43:00,844 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): REVOKE PRIVS at auth.c:567 2022-06-23 12:43:00,844 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): changed directory to '/' 2022-06-23 12:43:00,844 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): in dir_check_full(): path = '/', fullpath = '/FTP/cosmin/' 2022-06-23 12:43:00,844 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): in dir_check_full(): setting umask to 0077 (was 0066) 2022-06-23 12:43:00,844 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): USER cosmin: Login successful 2022-06-23 12:43:00,844 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): user 'cosmin' authenticated by mod_sql.c 2022-06-23 12:43:00,844 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): dispatching POST_CMD command 'PASS (hidden)' to mod_sql 2022-06-23 12:43:00,844 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): dispatching POST_CMD command 'PASS (hidden)' to mod_sql 2022-06-23 12:43:00,844 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): dispatching POST_CMD command 'PASS (hidden)' to mod_delay 2022-06-23 12:43:00,844 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): dispatching POST_CMD command 'PASS (hidden)' to mod_log 2022-06-23 12:43:00,844 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): dispatching POST_CMD command 'PASS (hidden)' to mod_ls 2022-06-23 12:43:00,844 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): dispatching POST_CMD command 'PASS (hidden)' to mod_auth 2022-06-23 12:43:00,844 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): RELINQUISH PRIVS at mod_auth.c:2148 2022-06-23 12:43:00,844 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): UseReverseDNS off, returning IP address instead of DNS name 2022-06-23 12:43:00,844 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): ROOT PRIVS at mod_auth.c:725 2022-06-23 12:43:00,844 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): ROOT PRIVS: ID switching disabled 2022-06-23 12:43:00,844 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): REVOKE PRIVS at mod_auth.c:726 2022-06-23 12:43:00,844 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): REVOKE PRIVS: unable to seteuid(): Operation not permitted 2022-06-23 12:43:00,844 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): RootRevoke in effect, dropped root privs 2022-06-23 12:43:00,844 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): dispatching POST_CMD command 'PASS (hidden)' to mod_rlimit 2022-06-23 12:43:00,844 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): dispatching POST_CMD command 'PASS (hidden)' to mod_xfer 2022-06-23 12:43:00,844 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): dispatching POST_CMD command 'PASS (hidden)' to mod_core 2022-06-23 12:43:00,844 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): dispatching LOG_CMD command 'PASS (hidden)' to mod_sql 2022-06-23 12:43:00,848 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): dispatching LOG_CMD command 'PASS (hidden)' to mod_log 2022-06-23 12:43:00,848 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): dispatching LOG_CMD command 'PASS (hidden)' to mod_delay 2022-06-23 12:43:00,848 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): dispatching LOG_CMD command 'PASS (hidden)' to mod_auth 2022-06-23 12:43:00,848 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): USER cosmin: Login successful. 2022-06-23 12:43:00,848 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): dispatching POST_CMD command 'USERAUTH_REQUEST cosmin password' to mod_sql 2022-06-23 12:43:00,848 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): dispatching LOG_CMD command 'USERAUTH_REQUEST cosmin password' to mod_sql 2022-06-23 12:43:00,848 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): dispatching LOG_CMD command 'USERAUTH_REQUEST cosmin password' to mod_log 2022-06-23 12:43:00,848 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): dispatching LOG_CMD command 'CHANNEL_OPEN session' to mod_sql 2022-06-23 12:43:00,848 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): dispatching LOG_CMD command 'CHANNEL_OPEN session' to mod_log 2022-06-23 12:43:00,848 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): dispatching LOG_CMD command 'CHANNEL_REQUEST env' to mod_sql 2022-06-23 12:43:00,848 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): dispatching LOG_CMD command 'CHANNEL_REQUEST env' to mod_log 2022-06-23 12:43:00,848 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): dispatching LOG_CMD command 'CHANNEL_REQUEST subsystem' to mod_sql 2022-06-23 12:43:00,849 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): dispatching LOG_CMD command 'CHANNEL_REQUEST subsystem' to mod_log 2022-06-23 12:43:00,849 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): dispatching POST_CMD command 'INIT 3' to mod_sql 2022-06-23 12:43:00,849 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): dispatching LOG_CMD command 'INIT 3' to mod_sql 2022-06-23 12:43:00,849 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): dispatching LOG_CMD command 'INIT 3' to mod_log 2022-06-23 12:43:00,849 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): dispatching PRE_CMD command 'REALPATH .' to mod_core 2022-06-23 12:43:00,849 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): dispatching PRE_CMD command 'REALPATH .' to mod_core 2022-06-23 12:43:00,849 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): in dir_check_full(): path = '/', fullpath = '/FTP/cosmin/' 2022-06-23 12:43:00,850 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): in dir_check_full(): setting umask to 0077 (was 0077) 2022-06-23 12:43:00,850 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): dispatching POST_CMD command 'REALPATH .' to mod_sql 2022-06-23 12:43:00,850 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): dispatching LOG_CMD command 'REALPATH .' to mod_sql 2022-06-23 12:43:00,850 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): dispatching LOG_CMD command 'REALPATH .' to mod_log 2022-06-23 12:43:17,245 FTP-PROD1 proftpd[45861] 172.18.128.128: scrubbing scoreboard 2022-06-23 12:43:17,245 FTP-PROD1 proftpd[45861] 172.18.128.128: ROOT PRIVS at scoreboard.c:1433 2022-06-23 12:43:17,245 FTP-PROD1 proftpd[45861] 172.18.128.128: RELINQUISH PRIVS at scoreboard.c:1436 2022-06-23 12:43:17,245 FTP-PROD1 proftpd[45861] 172.18.128.128: ROOT PRIVS at scoreboard.c:1477 2022-06-23 12:43:17,245 FTP-PROD1 proftpd[45861] 172.18.128.128: RELINQUISH PRIVS at scoreboard.c:1586 2022-06-23 12:43:17,245 FTP-PROD1 proftpd[45861] 172.18.128.128: finished scrubbing scoreboard *---first attempt failed* 2022-06-23 12:43:24,462 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): dispatching PRE_CMD command 'STOR /check_nrpe.log' to mod_core 2022-06-23 12:43:24,462 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): dispatching PRE_CMD command 'STOR /check_nrpe.log' to mod_core 2022-06-23 12:43:24,462 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): dispatching PRE_CMD command 'STOR /check_nrpe.log' to mod_xfer 2022-06-23 12:43:24,465 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): in dir_check_full(): path = '/check_nrpe.log', fullpath = '/FTP/cosmin/check_nrpe.log' 2022-06-23 12:43:24,465 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): in dir_check_full(): setting umask to 0066 (was 0077) 2022-06-23 12:43:24,475 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): in dir_check_full(): path = '/check_nrpe.log', fullpath = '/FTP/cosmin/check_nrpe.log' 2022-06-23 12:43:24,477 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): dispatching POST_CMD_ERR command 'STOR /check_nrpe.log' to mod_sql 2022-06-23 12:43:24,477 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): dispatching LOG_CMD_ERR command 'STOR /check_nrpe.log' to mod_sql 2022-06-23 12:43:24,477 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): dispatching LOG_CMD_ERR command 'STOR /check_nrpe.log' to mod_log 2022-06-23 12:43:24,477 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): dispatching LOG_CMD_ERR command 'STOR /check_nrpe.log' to mod_xfer 2022-06-23 12:43:24,477 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): dispatching POST_CMD_ERR command 'OPEN /check_nrpe.log' to mod_sql 2022-06-23 12:43:24,477 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): dispatching LOG_CMD_ERR command 'OPEN /check_nrpe.log' to mod_sql 2022-06-23 12:43:24,477 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): dispatching LOG_CMD_ERR command 'OPEN /check_nrpe.log' to mod_log *---second attempt ok.* 2022-06-23 12:43:27,034 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): dispatching PRE_CMD command 'STOR /check_nrpe.log' to mod_core 2022-06-23 12:43:27,034 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): dispatching PRE_CMD command 'STOR /check_nrpe.log' to mod_core 2022-06-23 12:43:27,034 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): dispatching PRE_CMD command 'STOR /check_nrpe.log' to mod_xfer 2022-06-23 12:43:27,034 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): in dir_check_full(): path = '/check_nrpe.log', fullpath = '/FTP/cosmin/check_nrpe.log' 2022-06-23 12:43:27,034 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): in dir_check_full(): setting umask to 0066 (was 0066) 2022-06-23 12:43:27,035 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): dispatching POST_CMD command 'OPEN /check_nrpe.log' to mod_sql 2022-06-23 12:43:27,035 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): dispatching LOG_CMD command 'OPEN /check_nrpe.log' to mod_sql 2022-06-23 12:43:27,035 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): dispatching LOG_CMD command 'OPEN /check_nrpe.log' to mod_log 2022-06-23 12:43:27,035 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): in dir_check_full(): path = '/check_nrpe.log', fullpath = '/FTP/cosmin/check_nrpe.log' 2022-06-23 12:43:27,035 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): in dir_check_full(): setting umask to 0066 (was 0066) 2022-06-23 12:43:27,035 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): dispatching POST_CMD command 'WRITE eb2a339c8a841268 0 931' to mod_sql 2022-06-23 12:43:27,035 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): dispatching LOG_CMD command 'WRITE eb2a339c8a841268 0 931' to mod_sql 2022-06-23 12:43:27,035 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): dispatching LOG_CMD command 'WRITE eb2a339c8a841268 0 931' to mod_log 2022-06-23 12:43:27,046 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): dispatching POST_CMD command 'STOR /check_nrpe.log' to mod_sql 2022-06-23 12:43:27,046 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): dispatching POST_CMD command 'STOR /check_nrpe.log' to mod_sql 2022-06-23 12:43:27,046 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): dispatching POST_CMD command 'STOR /check_nrpe.log' to mod_xfer 2022-06-23 12:43:27,046 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): dispatching LOG_CMD command 'STOR /check_nrpe.log' to mod_sql 2022-06-23 12:43:27,046 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): dispatching LOG_CMD command 'STOR /check_nrpe.log' to mod_log 2022-06-23 12:43:27,046 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): dispatching LOG_CMD command 'STOR /check_nrpe.log' to mod_xfer 2022-06-23 12:43:27,046 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): Transfer completed: 931 bytes in 0.01 seconds 2022-06-23 12:43:27,046 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): dispatching POST_CMD command 'CLOSE eb2a339c8a841268' to mod_sql 2022-06-23 12:43:27,046 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): dispatching LOG_CMD command 'CLOSE eb2a339c8a841268' to mod_sql 2022-06-23 12:43:27,046 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): dispatching LOG_CMD command 'CLOSE eb2a339c8a841268' to mod_log 2022-06-23 12:43:29,710 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): dispatching LOG_CMD command 'CHANNEL_EOF' to mod_sql 2022-06-23 12:43:29,710 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): dispatching LOG_CMD command 'CHANNEL_EOF' to mod_log 2022-06-23 12:43:29,710 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): dispatching LOG_CMD command 'CHANNEL_CLOSE' to mod_sql 2022-06-23 12:43:29,710 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): dispatching LOG_CMD command 'CHANNEL_CLOSE' to mod_log 2022-06-23 12:43:29,710 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): mod_sftp/1.0.1: scrubbing 2 passphrases from memory 2022-06-23 12:43:29,710 FTP-PROD1 proftpd[45863] 172.18.128.128 (13.48.243.90[13.48.243.90]): SSH2 session closed. #My settings: ubuntu@FTP-PROD1:/opt/proftpd-sftp/sbin$ ./proftpd -V Compile-time Settings: Version: 1.3.7d (maint) Platform: LINUX [Linux 5.13.0-1031-aws x86_64] Built: Wed Jun 15 2022 10:05:45 UTC Built With: configure '--prefix=/opt/proftpd-sftp' '--enable-openssl' '--with-modules=mod_sql:mod_sql_mysql:mod_sftp:mod_unique_id' '--with-includes=/usr/include/mysql/' '--with-libraries=/usr/lib/x86_64-linux-gnu' CFLAGS: -g2 -O2 -Wall -fno-omit-frame-pointer -fno-strict-aliasing LDFLAGS: -L$(top_srcdir)/lib -L$(top_builddir)/lib -rdynamic -L/usr/lib/x86_64-linux-gnu -L/usr/lib/x86_64-linux-gnu LIBS: -lssl -lcrypto -lm -lmysqlclient -lz -lcrypto -lsupp -lcrypt -ldl -pthread Files: Configuration File: /opt/proftpd-sftp/etc/proftpd.conf Pid File: /opt/proftpd-sftp/var/proftpd.pid Scoreboard File: /opt/proftpd-sftp/var/proftpd.scoreboard Info: + Max supported UID: 4294967295 + Max supported GID: 4294967295 Features: - Autoshadow support - Controls support + curses support - Developer support - DSO support + IPv6 support + Largefile support - Lastlog support - Memcache support + ncurses support - NLS support + OpenSSL support (OpenSSL 1.1.1f 31 Mar 2020) - PCRE support - POSIX ACL support - Redis support + Sendfile support + Shadow file support - Sodium support + Trace support + xattr support Tunable Options: PR_TUNABLE_BUFFER_SIZE = 1024 PR_TUNABLE_DEFAULT_RCVBUFSZ = 8192 PR_TUNABLE_DEFAULT_SNDBUFSZ = 8192 PR_TUNABLE_ENV_MAX = 2048 PR_TUNABLE_GLOBBING_MAX_MATCHES = 100000 PR_TUNABLE_GLOBBING_MAX_RECURSION = 8 PR_TUNABLE_HASH_TABLE_SIZE = 40 PR_TUNABLE_LOGIN_MAX = 256 PR_TUNABLE_NEW_POOL_SIZE = 512 PR_TUNABLE_PATH_MAX = 4096 PR_TUNABLE_SCOREBOARD_BUFFER_SIZE = 80 PR_TUNABLE_SCOREBOARD_SCRUB_TIMER = 30 PR_TUNABLE_SELECT_TIMEOUT = 30 PR_TUNABLE_TIMEOUTIDENT = 10 PR_TUNABLE_TIMEOUTIDLE = 600 PR_TUNABLE_TIMEOUTLINGER = 10 PR_TUNABLE_TIMEOUTLOGIN = 300 PR_TUNABLE_TIMEOUTNOXFER = 300 PR_TUNABLE_TIMEOUTSTALLED = 3600 PR_TUNABLE_XFER_SCOREBOARD_UPDATES = 10 #My config file ubuntu@FTP-PROD1:/opt/proftpd-sftp/etc$ cat proftpd.conf DisplayConnect /opt/proftpd-sftp/etc/DisplayConnect DisplayQuit /opt/proftpd-sftp/etc/DisplayQuit DisplayLogin /opt/proftpd-sftp/etc/DisplayLogin ServerIdent on "XXXX" ServerName "XXXX" UseReverseDNS off MaxInstances 1000 MaxClients 999 "Max Clients reached!" MaxClientsPerHost 50 "Max Clients per Host reached!" MaxClientsPerUser 50 "Max Client per User reached!" MaxLoginAttempts 3 TimeoutLogin 120 TimeoutIdle 300 TimeoutNoTransfer 300 TimeoutStalled 300 ServerType standalone DefaultServer on UseIPv6 off Umask 066 077 User nobody Group nogroup DefaultRoot ~ AllowOverwrite on AuthOrder mod_sql.c SQLAuthenticate users SQLConnectInfo PROFTPD@XXX XXX XXX SQLUserInfo USERS USER PASS UID GID DIR NULL SQLUserWhereClause "SFTP=1" #SQLLogFile /var/log/proftpd/sftp-sql.log SQLAuthTypes Crypt SQLMinID 1999 SQLDefaultGID 2000 SQLLog PASS updatecount SQLNamedQuery updatecount UPDATE "COUNT=COUNT+1,LAST=now() WHERE USER='%u'" USERS CreateHome on <IfModule mod_unique_id.c> LogFormat logformat "%{%Y-%m-%d %H:%M:%S}t.%{millisecs} %{UNIQUE_ID}e %a %{remote-port} %u \"%r\" %s %S %bbytes %Tsec %{transfer-status} %{transfer-type} %{protocol}" ExtendedLog /var/log/proftpd/sftp-extended.log AUTH,INFO,DIRS,READ,WRITE,MISC,SEC,EXIT logformat </IfModule> <IfModule mod_sftp.c> Port 22 SFTPEngine on SFTPHostKey /opt/proftpd-sftp/etc/sftp.azets.com.rsa.key SFTPHostKey /opt/proftpd-sftp/etc/sftp.azets.com.ecdsa.key SFTPAuthorizedUserKeys file:~/.sftp/authorized_keys </IfModule> <Limit SITE_CHMOD> DenyAll </Limit> Best regards, *Cosmin * _______________________________________________ ProFTPD Users List <[email protected]> Unsubscribe problems? http://www.proftpd.org/list-unsub.html