Re: [Proftpd-user] SFTP with virtual users file

Hi John,

Thanks very much for the help!

I've done output of proftpd -n -c /usr/local/etc/proftpd.conf

# proftpd -n -c /usr/local/etc/proftpd.conf
2023-04-11 10:22:44,019 sftp proftpd[46279] 10.12.30.199: ProFTPD 1.3.8 (stable) (built Tue Apr 4 2023 14:16:50 BST standalone mode STARTUP

No other output.


It's running on FreeBSD 13.1 compiled from the ports tree.


# cat proftpd.conf
ServerName        "ProFTPD Installation"
ServerType        standalone
DefaultServer           on
ScoreboardFile          /var/run/proftpd/proftpd.scoreboard
Port              21
UseIPv6                 on
DefaultAddress          vmx0
Umask             022

Include /usr/local/etc/proftpd/modules.conf

MaxInstances            30
CommandBufferSize 512
User              nobody
Group             nogroup
AllowOverwrite          on

<Limit SITE_CHMOD>
  DenyAll
</Limit>

DefaultRoot                     ~
RequireValidShell off

<IfModule mod_sftp_pam.c>
  SFTPPAMEngine on
 SFTPPAMServiceName sftp
</IfModule>

SFTPEngine on
Port 2222
SFTPLog /var/log/proftpd/sftp.log
SFTPHostKey /etc/ssh/ssh_host_rsa_key
SFTPHostKey /etc/ssh/ssh_host_ecdsa_key
SFTPAuthMethods password
#SFTPAuthorizedUserKeys file:/etc/proftpd/authorized_keys/%u
DefaultRoot ~
RequireValidShell off
AuthUserFile /usr/local/etc/proftpd/ftpd.passwd
AuthGroupFile /usr/local/etc/proftpd/ftpd.group
AuthOrder mod_auth_file.c
#SFTPPAMEngine off
UseReverseDNS off
SFTPCompression delayed


# cat proftpd/modules.conf
ModulePath /usr/local/libexec/proftpd
LoadFile /usr/local/libexec/proftpd/mod_sftp.so
LoadModule mod_sftp.c


# proftpd -vv
ProFTPD Version: 1.3.8 (stable)
  Scoreboard Version: 01040003
  Built: Tue Apr 4 2023 14:16:50 BST

Loaded modules:
  mod_sftp/1.1.1
  mod_ctrls/0.9.5
  mod_auth_pam/1.2
  mod_dso/0.5
  mod_facts/0.7
  mod_delay/0.8
  mod_site.c
  mod_log/1.0
  mod_ls.c
  mod_auth.c
  mod_auth_file/1.0
  mod_auth_unix.c
  mod_rlimit/1.0
  mod_xfer.c
  mod_core.c


Hope that helps!

With thanks,
T


________________________________
From: John Stoffel <[email protected]>
Sent: 06 April 2023 19:53
To: [email protected] <[email protected]>
Subject: Re: [Proftpd-user] SFTP with virtual users file

>>>>> "tach" == tach yon <[email protected]> writes:

> I'm trying to set up proftpd to provide SFTP for virtual users on
> port 2222, but unfortunately I don't see proftpd binding to port
> 2222. I've not been able to find any errors in /var/log/proftpd/
> sftp.log or /var/log/messages.

Have you tried running proftpd with the -n flag to see what it says?


     proftpd -n -c /etc/proftpd.conf

or

   proftpd -n -c /etc/proftpd/proftpd.conf


is a good start.  And make sure you've got an "Include
/etc/proftpd/modules.conf" line in the main .conf file as well.

> I was wondering if someone might be able to spot something I'm doing wrong please?

> <IfModule mod_sftp_pam.c>
>   SFTPPAEngine on
>   SFTPPAMServiceName sftp
> </IfModule>

> SFTPEngine on
> Port 2222
> SFTPLog /var/log/proftpd/sftp.log

> # Configure host keys
> SFTPHostKey /etc/ssh/ssh_host_rsa_key
> SFTPHostKey /etc/ssh/ssh_hostecdsa_key

> SFTPAuthMethods password

> DefaultRoot ~
> RequireValidShell off
> AuthUserFile /usr/local/etc/proftpd/ftpd.passwd
> AuthGroupFile /usr/local/etc/proftpd/ftpd.group
> AuthOrder mod_auth_file.c
> UserReverseDNS off

> SFTPCompression delayed

What OS are you running this on and how did you install the package?
If you compiled it from scratch, did you make sure you have all the
needed development files installed for all the modules?

If you installed it using a package manager, make sure you installed
more than just the core package, make sure you have any extra modules
installed.  But I can't say for sure.

Look for the library, and then also post what you full configuration
is.  But without comments please!  Just the settings you've changed
should be all we need.

   ls /usr/lib/proftpd/mod_sftp*

Should show that you have the module located, and the
/etc/proftpd/proftpd.conf file should have a a couple of 'Include ...'
lines as well.

But again, give us more info.

John


_______________________________________________
ProFTPD Users List   <[email protected]>
Unsubscribe problems?
http://www.proftpd.org/list-unsub.html

_______________________________________________
ProFTPD Users List   <[email protected]>
Unsubscribe problems?
http://www.proftpd.org/list-unsub.html