• Recent
  • Unsolved
  • Tags
  • Popular
  • Users
  • Groups
  • Search
  • Register
  • Login
  • Recent
  • Unsolved
  • Tags
  • Popular
  • Users
  • Groups
  • Search
  • Register
  • Login

How to disable FOG FTP passive mode?

Scheduled Pinned Locked Moved Solved
FOG Problems
3
24
2.4k
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • S
    Single @Sebastian Roth
    last edited by Mar 13, 2020, 2:39 PM

    @Sebastian-Roth OK, THX!

    root@nik-buz-s01:~# ls -al /images
    total 896
    drwxrwxrwx 26 fogproject ftp          4096 Mar 11 10:15 .
    drwxr-xr-x 23 root       root         4096 Dec 10 08:56 ..
    -rw-r--r--  1 fogproject fogproject   3235 Mar 11 10:12 123
    drwxrwxrwx  2 fogproject ftp          4096 Nov 27 01:09 buz1
    drwxrwxrwx  2 fogproject ftp          4096 Nov 27 01:21 buz10
    drwxrwxrwx  2 fogproject ftp          4096 Nov 27 00:45 buz11
    drwxrwxrwx  2 fogproject ftp          4096 Nov 27 00:44 buz12
    drwxrwxrwx  2 fogproject ftp          4096 Nov 27 00:21 buz13
    drwxrwxrwx  2 fogproject ftp          4096 Nov 27 02:29 buz14
    drwxrwxrwx  2 fogproject ftp          4096 Nov 27 02:09 buz15
    drwxrwxrwx  2 fogproject ftp          4096 Nov 27 02:06 buz16
    drwxrwxrwx  2 fogproject ftp          4096 Nov 27 01:45 buz17
    drwxrwxrwx  2 fogproject ftp          4096 Nov 27 01:29 buz18
    drwxrwxrwx  2 fogproject ftp          4096 Nov 27 07:18 buz19
    drwxrwxrwx  2 fogproject ftp          4096 Nov 27 02:47 buz2
    drwxrwxrwx  2 fogproject ftp          4096 Mar 11 10:15 buz20
    drwxrwxrwx  2 fogproject ftp          4096 Nov 27 02:51 buz3
    drwxrwxrwx  2 fogproject ftp          4096 Nov 27 02:53 buz4
    drwxrwxrwx  2 fogproject ftp          4096 Nov 27 05:30 buz5
    drwxrwxrwx  2 fogproject ftp          4096 Nov 27 06:23 buz6
    drwxrwxrwx  2 fogproject ftp          4096 Nov 27 02:26 buz7
    drwxrwxrwx  2 fogproject ftp          4096 Nov 27 02:28 buz8
    drwxrwxrwx  2 fogproject ftp          4096 Nov 27 01:26 buz9
    drwxrwxrwx  6 fogproject ftp          4096 Mar  6 11:27 dev
    -rw-rw-rw-  1 fogproject ftp        794038 Dec  7 12:57 fogdb.sql.bak
    drwxrwxrwx  2 fogproject ftp         16384 Jun 29  2018 lost+found
    -rw-r--r--  1 fogproject ftp             0 Mar 10 17:19 .mntcheck
    drwxrwxrwx  2 fogproject ftp          4096 Jun 29  2018 postdownloadscripts
    drwxrwxrwx  2 fogproject ftp          4096 Nov 27 03:42 s02
    
    root@nik-buz-s01:~# ls -al /images/dev
    total 24
    drwxrwxrwx  6 fogproject ftp  4096 Mar  6 11:27 .
    drwxrwxrwx 26 fogproject ftp  4096 Mar 11 10:15 ..
    drwxrwxrwx  2 fogproject ftp  4096 Dec 24 21:10 10bf4879d7a6
    drwxrwxrwx  2 root       root 4096 Mar 10 16:31 10bf4879d860
    drwxrwxrwx  2 root       root 4096 Dec 24 11:19 c86000e14876
    -rwxrwxrwx  1 fogproject ftp     0 Jun 29  2018 .mntcheck
    drwxrwxrwx  2 fogproject ftp  4096 Jun 29  2018 postinitscripts
    
    root@nik-buz-s01:~# getenforce
    Disabled
    
    root@nik-buz-s01:~# df -h
    Filesystem      Size  Used Avail Use% Mounted on
    udev            3.9G     0  3.9G   0% /dev
    tmpfs           787M   84M  703M  11% /run
    /dev/md1        103G  3.5G   94G   4% /
    tmpfs           3.9G     0  3.9G   0% /dev/shm
    tmpfs           5.0M     0  5.0M   0% /run/lock
    tmpfs           3.9G     0  3.9G   0% /sys/fs/cgroup
    /dev/sdc2       989G  392G  548G  42% /images
    /dev/sdc1       845G  747G   56G  94% /data
    tmpfs           787M     0  787M   0% /run/user/1000
    
    1 Reply Last reply Reply Quote 0
    • S
      Sebastian Roth Moderator
      last edited by Mar 13, 2020, 3:30 PM

      @Single Please run these as well:

      id fogproject
      id ftp
      ps aux | grep ftp
      

      Web GUI issue? Please check apache error (debian/ubuntu: /var/log/apache2/error.log, centos/fedora/rhel: /var/log/httpd/error_log) and php-fpm log (/var/log/php*-fpm.log)

      Please support FOG if you like it: https://wiki.fogproject.org/wiki/index.php/Support_FOG

      S 1 Reply Last reply Mar 13, 2020, 3:34 PM Reply Quote 0
      • S
        Single @Sebastian Roth
        last edited by Mar 13, 2020, 3:34 PM

        @Sebastian-Roth

        root@nik-buz-s01:~# id fogproject
        uid=1002(fogproject) gid=1003(fogproject) groups=1003(fogproject),113(ftp)
        root@nik-buz-s01:~# id ftp
        uid=106(ftp) gid=113(ftp) groups=113(ftp)
        root@nik-buz-s01:~# ps aux | grep ftp
        root       717  0.0  0.0   2800   924 ?        Ss   Feb24   0:00 /usr/sbin/in.tftpd --listen --user root --address :69 --ipv4 -s /tftpboot
        root      5411  0.0  0.0   6704   888 pts/0    S+   17:32   0:00 grep ftp
        root     13669  0.0  0.0   6620  2456 ?        Ss   Mar10   0:25 /usr/sbin/vsftpd /etc/vsftpd.conf
        
        1 Reply Last reply Reply Quote 0
        • S
          Sebastian Roth Moderator
          last edited by Mar 13, 2020, 3:36 PM

          @Single Please try logging into FTP via command line client and try renaming/moving those directories:

          ftp fog.server.ip.add
          ...
          ls /images/dev
          rename /images/dev/10bf4879d860 /images/buz20_test
          

          Web GUI issue? Please check apache error (debian/ubuntu: /var/log/apache2/error.log, centos/fedora/rhel: /var/log/httpd/error_log) and php-fpm log (/var/log/php*-fpm.log)

          Please support FOG if you like it: https://wiki.fogproject.org/wiki/index.php/Support_FOG

          S 1 Reply Last reply Mar 13, 2020, 3:44 PM Reply Quote 0
          • S
            Single @Sebastian Roth
            last edited by Single Mar 13, 2020, 10:01 AM Mar 13, 2020, 3:44 PM

            @Sebastian-Roth said in How to disable FOG FTP passive mode?:

            rename /images/dev/10bf4879d860 /images/buz20_test

            ftp> ls /images/dev
            200 PORT command successful. Consider using PASV.
            150 Here comes the directory listing.
            226 Transfer done (but failed to open directory).
            ftp> rename /images/dev/10bf4879d860 /images/buz20_test
            550 RNFR command failed.
            

            Why???

            FTP is allowed in nft firewall

            ...
            ct state new tcp dport { ftp-data, ftp } accept comment "Allow access to FTP-server"
            ...
            
            1 Reply Last reply Reply Quote 0
            • S
              Sebastian Roth Moderator
              last edited by Mar 13, 2020, 4:01 PM

              @Single Try changing the ownership (chown -R fogproject:fogproject /images) and then FTP again. Doesn’t make sense, but give it a go.

              Web GUI issue? Please check apache error (debian/ubuntu: /var/log/apache2/error.log, centos/fedora/rhel: /var/log/httpd/error_log) and php-fpm log (/var/log/php*-fpm.log)

              Please support FOG if you like it: https://wiki.fogproject.org/wiki/index.php/Support_FOG

              S 1 Reply Last reply Mar 13, 2020, 4:08 PM Reply Quote 0
              • S
                Single @Sebastian Roth
                last edited by Mar 13, 2020, 4:08 PM

                @Sebastian-Roth nothing changed

                1 Reply Last reply Reply Quote 0
                • S
                  Sebastian Roth Moderator
                  last edited by Mar 13, 2020, 4:13 PM

                  @Single I can’t imagine this to be a firewall issue though we can make sure. Just use ftp command line client directly on the FOG server (ftp localhost) and try rename.

                  Web GUI issue? Please check apache error (debian/ubuntu: /var/log/apache2/error.log, centos/fedora/rhel: /var/log/httpd/error_log) and php-fpm log (/var/log/php*-fpm.log)

                  Please support FOG if you like it: https://wiki.fogproject.org/wiki/index.php/Support_FOG

                  1 Reply Last reply Reply Quote 0
                  • S
                    Single
                    last edited by Single Mar 13, 2020, 10:59 AM Mar 13, 2020, 4:37 PM

                    # mount | grep images
                    /dev/sdc2 on /images type ext4 (rw,relatime)
                    

                    Now it’s looks like it is vsftpd problem. Mb it can be helpful if I paste my vsftpd.conf here:

                    max_per_ip=200
                    
                    anonymous_enable=NO
                    userlist_enable=YES
                    userlist_file=/etc/vsftpd/vsftpd.userlist
                    user_config_dir=/etc/vsftpd/user_config_dir/
                    userlist_deny=NO
                    local_enable=YES
                    virtual_use_local_privs=YES
                    
                    write_enable=YES
                    local_umask=022
                    dirmessage_enable=YES
                    xferlog_enable=YES
                    connect_from_port_20=YES
                    
                    xferlog_std_format=NO
                    log_ftp_protocol=YES
                    vsftpd_log_file=/var/log/vsftp.log
                    
                    chroot_local_user=YES
                    secure_chroot_dir=/var/run/vsftpd/empty
                    allow_writeable_chroot=YES
                    
                    listen=YES
                    listen_ipv6=NO
                    
                    pam_service_name=vsftpd
                    
                    pasv_enable=NO
                    tcp_wrappers=YES
                    seccomp_sandbox=NO
                    
                    #cat /etc/vsftpd/user_config_dir/fogproject 
                    local_root=/images
                    write_enable=YES
                    
                    1 Reply Last reply Reply Quote 0
                    • S
                      Sebastian Roth Moderator
                      last edited by Sebastian Roth Mar 13, 2020, 11:38 AM Mar 13, 2020, 5:37 PM

                      @Single said in How to disable FOG FTP passive mode?:

                      Mb it can be helpful if I paste my vsftpd.conf here

                      You are kidding, right?!?! I have not tested this yet but I am fairly sure the config is causing the issue. If you had told us you have a modified config (different from what FOG generates for you) then we would have found the solution in no time. 🙂

                      chroot_local_user=YES
                      secure_chroot_dir=/var/run/vsftpd/empty
                      allow_writeable_chroot=YES
                      

                      Pretty sure this is part of the issue. But there might be other config options as well.

                      Default config generated by FOG:

                      max_per_ip=200
                      anonymous_enable=NO
                      local_enable=YES
                      write_enable=YES
                      local_umask=022
                      dirmessage_enable=YES
                      xferlog_enable=YES
                      connect_from_port_20=YES
                      xferlog_std_format=YES
                      listen=YES
                      pam_service_name=vsftpd
                      userlist_enable=NO
                      seccomp_sandbox=NO
                      

                      Web GUI issue? Please check apache error (debian/ubuntu: /var/log/apache2/error.log, centos/fedora/rhel: /var/log/httpd/error_log) and php-fpm log (/var/log/php*-fpm.log)

                      Please support FOG if you like it: https://wiki.fogproject.org/wiki/index.php/Support_FOG

                      1 Reply Last reply Reply Quote 0
                      • S
                        Single
                        last edited by Mar 13, 2020, 5:42 PM

                        I’ll check and let you know
                        Probably I was stupid but it was required to have more than one FTP user with different FTP folders in that server.

                        1 Reply Last reply Reply Quote 0
                        • S
                          Sebastian Roth Moderator
                          last edited by Mar 14, 2020, 7:40 AM

                          @Single It’s all good, you are allowed to modify the config on your server to whatever you want. Just saying that letting us know right away would have saved you a lot of time. 🙂

                          Web GUI issue? Please check apache error (debian/ubuntu: /var/log/apache2/error.log, centos/fedora/rhel: /var/log/httpd/error_log) and php-fpm log (/var/log/php*-fpm.log)

                          Please support FOG if you like it: https://wiki.fogproject.org/wiki/index.php/Support_FOG

                          S 1 Reply Last reply Mar 14, 2020, 1:10 PM Reply Quote 0
                          • S
                            Single @Sebastian Roth
                            last edited by Single Mar 14, 2020, 7:13 AM Mar 14, 2020, 1:10 PM

                            @Sebastian-Roth Thx for your help, Sebatian!
                            I commented out line

                            chroot_local_user=YES
                            

                            And now everything is just fine about my FOG installation.
                            MB it makes sense to add into FOG wiki - that vsftpd option is incompatible to FOG.

                            Now I need to find a way to chroot one user but not to chroot other, but it is definitely not a FOG problem. (And, it’s simple)

                            Thanks again.

                            Best regards!

                            1 Reply Last reply Reply Quote 1
                            • 1
                            • 2
                            • 2 / 2
                            2 / 2
                            • First post
                              21/24
                              Last post

                            246

                            Online

                            12.0k

                            Users

                            17.3k

                            Topics

                            155.2k

                            Posts
                            Copyright © 2012-2024 FOG Project