Hi list
I just installed vsftpd and started it (CentOS 5). Then put some files in /var/ftp/pub (for testing purposes with rights 777) and try to connect with local user to download those files.
$ lftp test@localhost Password: lftp test@localhost:~> ls ls: Login failed: 500 OOPS: cannot change directory:/home/test lftp test@localhost:~> pwd ftp://test@localhost
How to enable quick and dirty FTP transfer?
cheers Simon
Simon Jolle wrote:
Hi list
I just installed vsftpd and started it (CentOS 5). Then put some files in /var/ftp/pub (for testing purposes with rights 777) and try to connect with local user to download those files.
$ lftp test@localhost Password: lftp test@localhost:~> ls ls: Login failed: 500 OOPS: cannot change directory:/home/test lftp test@localhost:~> pwd ftp://test@localhost
How to enable quick and dirty FTP transfer?
cheers Simon
Hi Simon,
Is SELinux running? if so, what mode?
I recall having to construct an setsebool statement to get vsftpd opened up correctly. I'll look back at my notes and will repost this evening if it hasn't already been answered by then.
Kind regards, ~Ray
Hi Ray
2007/8/22, Ray Leventhal centos@swhi.net:
Is SELinux running? if so, what mode?
SELinux is running in enforcing mode.
I recall having to construct an setsebool statement to get vsftpd opened up correctly. I'll look back at my notes and will repost this evening if it hasn't already been answered by then.
This is my first machine with SELinux enabled.
cheers Simon
Simon Jolle wrote:
Hi Ray
2007/8/22, Ray Leventhal centos@swhi.net:
Is SELinux running? if so, what mode?
SELinux is running in enforcing mode.
I recall having to construct an setsebool statement to get vsftpd opened up correctly. I'll look back at my notes and will repost this evening if it hasn't already been answered by then.
This is my first machine with SELinux enabled.
cheers Simon
Does the ftp daemon respond properly if you issue:
/usr/sbin/setenforce 0
~R
2007/8/22, Ray Leventhal centos@swhi.net:
Does the ftp daemon respond properly if you issue:
/usr/sbin/setenforce 0
Hi Ray
Yes by disabling SElinux everything works as expected. I think I need some introductions docs about selinux ;-)
Simon Jolle wrote:
2007/8/22, Ray Leventhal centos@swhi.net:
Does the ftp daemon respond properly if you issue:
/usr/sbin/setenforce 0
Hi Ray
Yes by disabling SElinux everything works as expected. I think I need some introductions docs about selinux ;-)
Hi Simon.
There's usually a statement in the logs that will give you the exact command to instruct SELinux to allow certain things. if you do this:
cat /var/log/messages | grep sealert
you'll see what I mean. The message will provide a statement like:
sealert -l <some long hash>
do that, and the resulting message will have the setsebool statement to allow the daemon to run as you expect.
I'm also certain there are ways to get vsftpd to run without sacrificing the protections of SELinux, but I'll defer to those more expert, as I'm definitely not....(but I am learning)
Good luck, ~Ray
-
Ray Leventhal -
Simon Jolle